Media
CVE-2026-57633
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Media
CVE-2026-11575
PhonePe Payment Solutions <= 3.0.0 - Missing Authorization
Media
CVE-2026-57636
wpForo Forum <= 3.0.9 - Authenticated (Contributor+) SQL Injection
Media
CVE-2026-13402
Royal Elementor Addons <= 1.7.1062 - Unauthenticated Information Exposure
Media
CVE-2026-57314
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.3.2 - Reflected Cross-Site Scripting
Media
CVE-2026-57649
Shoppable Images (Lookbook) for WooCommerce <= 1.3 - Missing Authorization
Media
CVE-2026-57630
Blocksy Companion Pro <= 2.1.46 - Unauthenticated Insecure Direct Object Reference
Crítica
CVE-2026-9810
AI Chatbot & Workflow Automation by AIWU <= 1.5.3 - Unauthenticated Privilege Escalation
Media
CVE-2026-13331
Groundhogg <= 4.5.5 - Authenticated (Marketer+) SQL Injection via 'search' Parameter
Media
CVE-2026-57652
JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.0 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2026-57632
Email Marketing for WooCommerce by Omnisend <= 1.19.0 - Missing Authorization
Media
CVE-2026-57663
Recipe Cards For Your Food Blog from Zip Recipes <= 8.2.7 - Authenticated (Contributor+) SQL Injection
Media
CVE-2026-57662
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 30.0.0 - Authenticated (Contributor+) SQL Injection
Alta
CVE-2026-57317
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.2 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-57324
GIFT4U – Gift Cards All in One for Woo <= 1.0.10 - Missing Authorization
Alta
CVE-2026-57315
Blocksy Companion Pro <= 2.1.45 - Authenticated (Contributor+) Remote Code Execution
Alta
CVE-2026-10525
NEX-Forms <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2025-64637
Auros Core <= 5.3.1 - Unauthenticated Arbitrary Shortcode Execution
Media
CVE-2026-57667
Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.5 - Authenticated (Sales representative+) SQL Injection
Crítica
CVE-2026-55166
Lemur: ACME SSRF + creator-equality IDOR lead to AWS IAM/PKI compromise
Alta
CVE-2026-53461
ImageMagick has out-of-bounds write in ICON decoder due to incorrect loop
Alta
CVE-2026-53460
ImageMagick: Policy Bypass can Trigger an Out-of-Memory condition
Media
CVE-2026-49219
ImageMagick: Policy Bypass can read disallowed files via symlink
Alta
CVE-2026-49218
ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.