Alta
CVE-2026-27099
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Alta
CVE-2025-13603
WP AUDIO GALLERY <= 2.0 - Authenticated (Subscriber+) Arbitrary File Read via .htaccess Manipulation
Media
CVE-2025-13091
Shopire <= 1.0.57 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install
Alta
CVE-2025-12975
CTX Feed – WooCommerce Product Feed Manager <= 6.6.11 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation
Media
CVE-2025-12117
Renden <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
Media
CVE-2025-12500
Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.1 - Unauthenticated Limited File Upload
Media
CVE-2025-12884
Advanced Ads – Ad Manager & AdSense <= 2.0.14 - Missing Authorization to Authenticated (Subscriber+) Ad Placements Update
Crítica
CVE-2025-12882
Clasifico Listing <= 2.0 - Unauthenticated Privilege Escalation
Alta
CVE-2025-12821
NewsBlogger <= 0.2.5.6 - 0.2.5.9 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Media
CVE-2025-12116
Drift <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
Media
CVE-2025-12451
Easy SVG Support <= 4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Media
CVE-2025-12375
Printful Integration for WooCommerce <= 2.2.11 - Authenticated (Contributor+) Server-Side Request Forgery
Media
CVE-2025-11725
Aruba HiSpeed Cache <= 3.0.2 - Missing Authorization to Unauthenticated Plugin's Settings Modification
Media
CVE-2025-12081
ACF Photo Gallery Field <= 3.0 - Missing Authorization to Authenticated (Subscriber+) Attachment Metadata Modification
Media
CVE-2025-12172
Mailchimp List Subscribe Form <= 2.0.0 - Cross-Site Request Forgery to Mailchimp List Change
Media
CVE-2025-11706
Aruba HiSpeed Cache <= 3.0.2 - Reflected Cross-Site Scripting
Alta
CVE-2025-11754
Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.1.2 - Missing Authorization to Sensitive Information Exposure
Alta
CVE-2026-2653
A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of the file src/normals.c. Performing a manipulation results in heap-based buffer ov
Alta
CVE-2026-28456
OpenClaw affected by potential code execution via unsafe hook module path handling in Gateway
Alta
CVE-2026-28482
OpenClaw's unsanitized session ID enables path traversal in transcript file operations
Alta
CVE-2026-26960
Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction
Alta
ghsa-w5c7-9qqw-6645
OpenClaw inter-session prompts could be treated as direct user instructions
Alta
CVE-2026-29610
OpenClaw: Command hijacking via unsafe PATH handling (bootstrapping + node-host PATH overrides)
Media
CVE-2026-28476
OpenClaw affected by SSRF in optional Tlon (Urbit) extension authentication
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.