Media
CVE-2026-5505
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2026-6255
Simple Owl Shortcodes <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'num' Shortcode Attribute
Alta
CVE-2026-15293
WP Business Intelligence Lite <= 3.2.0 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation via Arbitrary SQL Modification
Media
CVE-2026-5247
Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.10.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute
Crítica
CVE-2025-13618
Mentoring <= 1.2.8 - Unauthenticated Privilege Escalation in mentoring_process_registration
Media
CVE-2026-1921
Loco Translate <= 2.8.2 - Authenticated (Translator+) Path Traversal to Limited File Read via 'ref' Parameter
Crítica
CVE-2026-5722
MoreConvert Pro <= 1.9.14 - Authentication Bypass via Waitlist Guest Verification Token Reuse
Alta
CVE-2026-29199
phpBB has Password Reset Link Poisoning via Host Header injection
Baja
CVE-2026-7738
@puchunjie/doc-tools-mcp has a Path Traversal Issue
Media
CVE-2026-7733
Funadmin has an Improper Access Control Issue
Media
CVE-2026-41471
Easy PayPal Events & Tickets <= 1.3 - Insecure Direct Object Reference to Unauthenticated Information Exposure
Alta
CVE-2026-40797
WebinarIgnition < 4.09.86 - Unauthenticated SQL Injection
Media
CVE-2026-25863
Conditional Fields for Contact Form 7 <= 2.7.2 - Unauthenticated Denial of Service
Baja
CVE-2026-7688
Dolibarr has an Injection issue
Baja
CVE-2026-7689
Dolibarr has Insufficient Verification of Data Authenticity
Alta
CVE-2026-42663
Simple Membership <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-7645
sublinear-time-solver has a Path Traversal Issue
Alta
CVE-2026-5063
NEX-Forms <= 9.1.11 - Unauthenticated Stored Cross-Site Scripting via POST Parameter Key Names
Baja
CVE-2026-7600
yii2-mcp-server has a Command Injection Issue
Media
CVE-2026-42662
Event Tickets and Registration <= 5.27.5 - Missing Authorization
Media
CVE-2026-39716
Flipmart <= 2.8 - Missing Authorization
Media
CVE-2026-4790
Premium Addons for Elementor <= 4.11.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_svg' Parameter
Media
CVE-2026-6817
Quiz Maker by AYS <= 6.7.1.29 - Unauthenticated Stored Cross-Site Scripting via 'rate_reason'
Alta
CVE-2026-6320
Salon Booking System – Free Version <= 10.30.25 - Unauthenticated Arbitrary File Read via Booking File Field Path Traversal
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.