Media
CVE-2026-16535
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Media
CVE-2026-16041
MStore API <= 4.20.0 - Missing Authorization
Alta
CVE-2026-18465
Maps Pro <= 6.1.2 - Unauthenticated Local File Inclusion
Media
CVE-2026-16590
Directory Kit <= 1.5.4 - Authenticated (Subscriber+) Contact Message and User Data Disclosure
Media
CVE-2026-14205
Events Manager <= 2.2.4 - Authenticated (Subscriber+) Payment Bypass
Media
CVE-2026-16589
Directory Kit <= 1.5.4 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2026-16262
Estatik <= 4.3.2 - Cross-Site Request Forgery
Media
CVE-2026-16559
YMC Filter <= 3.12.8 - Authenticated (Author+) Stored Cross-Site Scripting
Alta
CVE-2026-28143
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.56.0 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-16039
MStore API <= 4.20.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Order and Customer PII Disclosure
Media
CVE-2026-28147
Unlimited Elements For Elementor <= 2.0.15 - Missing Authorization
Media
CVE-2025-15678
Nexter Blocks <= 5.0.1 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2026-16988
GeoDirectory <= 2.8.168 - Unauthenticated Pending/Draft Listing Disclosure
Media
CVE-2026-13703
SEO Redirection Plugin – 301 Redirect Manager <= 9.18 - Authenticated (Subscriber+) Information Exposure
Media
CVE-2026-16578
Admin Safety Guard <= 1.3.0 - Unauthenticated User Data Disclosure
Media
CVE-2026-16595
Directory Kit <= 1.5.4 - Information Exposure to Authenticated (Subscriber+) User and Unpublished Listing Disclosure
Media
CVE-2026-15214
Subscriptions for WooCommerce <= 2.0.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Subscription Detail Disclosure
Alta
CVE-2026-18464
Maps Pro <= 6.1.2 - Unauthenticated Denial of Service
Media
CVE-2026-18037
Create by Mediavine <= 2.5.3 - Unauthenticated Information Exposure
Media
CVE-2026-16992
Create by Mediavine <= 2.5.3 - Unauthenticated Information Exposure
Alta
CVE-2026-12713
WPCargo Track & Trace <= 8.0.3 - Unauthenticated SQL Injection
Media
CVE-2026-16574
Dokan <= 5.0.10 - Insecure Direct Object Reference to Authenticated (Vendor+) Cross-Vendor Downloadable Product Access Grant
Media
CVE-2026-16594
Directory Kit <= 1.5.4 - Authenticated (Subscriber+) Plugin Settings and API Key Disclosure
Media
CVE-2026-16957
Slim SEO <= 4.9.10 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Meta Disclosure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.