Alta
CVE-2026-73498
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Baja
CVE-2026-10775
SGLang is Vulnerable to DoS via the data_hash Function
Media
CVE-2026-74020
Koji <= 2.2.1 - Missing Authorization
Media
CVE-2026-73394
Stitch Express <= 1.9.1 - Missing Authorization
Crítica
CVE-2026-73390
Total Donations <= 2.0.5 - Unauthenticated Privilege Escalation
Media
CVE-2026-73363
E-cab Taxi Booking Manager for Woocommerce < 2.0.8 - Missing Authorization
Alta
CVE-2025-15637
Shuffle <= 1.8 - Unauthenticated Local File Inclusion
Media
CVE-2026-66601
Media Library Assistant <= 3.39 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Alta
CVE-2026-66616
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-61986
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 30.0.5 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-66582
TranslatePress – Translate Multilingual sites with AI Translation <= 3.3.2 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-73387
Resido - Real Estate WordPress Theme <= 1.5 - Unauthenticated Local File Inclusion
Alta
CVE-2026-73347
TrueBooker – Appointment Booking and Scheduler System <= 1.2.6 - Unauthenticated Privilege Escalation
Alta
CVE-2026-66592
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection
Alta
CVE-2026-73185
NGG Smart Image Search < 4.0.0 - Unauthenticated SQL Injection
Alta
CVE-2026-66590
Tagembed: Social Media Feeds and Customer Reviews Widget <= 7.4 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2025-53999
Altair <= 5.2.2 - Missing Authorization
Alta
CVE-2026-73992
Query Wrangler <= 1.5.57 - Authenticated (Subscriber+) Remote Code Execution
Alta
CVE-2026-66609
TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme <= 5.12.3 - Unauthenticated SQL Injection
Alta
CVE-2026-66598
B2Bking <= 5.6.07 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-19842
SAML Single Sign On – SSO Login 4.8.85-5.4.6 - Unauthenticated Privilege Escalation
Alta
CVE-2026-73354
SimplyRETS Real Estate IDX <= 3.2.8 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-73388
Nikstore Core <= 1.5 - Unauthenticated SQL Injection
Alta
CVE-2026-28150
Golo Framework < 1.7.5 - Unauthenticated Local File Inclusion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.