Alta
CVE-2026-25452
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2026-25465
CP Multi View Events Calendar <= 1.4.39 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2026-25460
Ave Core <= 2.9.1 - Missing Authorization
Media
CVE-2026-24987
Activity Log for WordPress <= 1.2.7 - Missing Authorization
Media
CVE-2026-25455
Product Slider, Product Grid, Product Masonry <= 1.13.61 - Missing Authorization
Alta
CVE-2026-2991
KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token
Media
CVE-2026-24983
UpSolution Core <= 8.41 - Reflected Cross-Site Scripting
Media
CVE-2026-25462
avalex – Automatisch sichere Rechtstexte <= 3.1.3 - Missing Authorization
Media
CVE-2026-25309
Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.10.1 - Missing Authorization
Alta
CVE-2026-3090
Post SMTP <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'event_type'
Media
CVE-2026-2512
Code Embed <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Fields
Media
CVE-2026-2559
Post SMTP <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Office 365 OAuth Configuration Overwrite
Media
CVE-2026-42643
Image Widget <= 4.4.11 - Authenticated (Author+) Stored Cross-Site Scripting
Alta
CVE-2026-1463
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.0.4 - Authenticated (Author+) Local File Inclusion
Media
CVE-2026-32586
Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools < 7.11.3 - Missing Authorization
Alta
CVE-2026-25458
Moments <= 2.2 - Unauthenticated Local File Inclusion
Media
CVE-2026-25454
The League <= 4.4.1 - Missing Authorization
Media
CVE-2026-25306
XStore Core <= 5.6.4 - Reflected Cross-Site Scripting
Media
CVE-2026-25461
Listeo-Core - Directory Plugin by Purethemes <= 2.0.21 - Reflected Cross-Site Scripting
Alta
CVE-2026-32813
Admidio has a Second-Order SQL Injection via List Configuration (lsc_special_field, lsc_sort, lsc_filter)
Media
CVE-2026-32818
Admidio is Missing Authorization on Forum Topic and Post Deletion
Media
CVE-2026-32757
Admidio has an HTMLPurifier Bypass in eCard Message Allows HTML Email Injection
Crítica
CVE-2026-32817
Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion
Media
CVE-2026-32812
Admidio Vulnerable to SSRF and Local File Read via Unrestricted URL Fetch in SSO Metadata Endpoint
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.