Media
CVE-2026-31922
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2026-25333
Shopwell <= 1.0.11 - Missing Authorization
Media
CVE-2026-24962
Sigmize <= 0.0.9 - Cross-Site Request Forgery
Media
CVE-2026-25332
Endless Posts Navigation <= 2.2.9 - Missing Authorization
Media
CVE-2026-39609
Wava Payment <= 0.3.7 - Missing Authorization
Crítica
CVE-2026-1709
A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows un
Media
CVE-2026-25516
NiceGUI's XSS vulnerability in ui.markdown() allows arbitrary JavaScript execution through unsanitized HTML content
Alta
CVE-2026-25732
NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write
Media
CVE-2025-15476
The Bucketlister <= 0.1.5 - Missing Authorization to Authenticated (Subscriber+) Bucket List Modification
Media
CVE-2025-15477
The Bucketlister <= 0.1.5 - Authenticated (Contributor+) SQL Injection via `category` and `id` Shortcode Attributes
Media
CVE-2026-0555
Premmerce <= 1.3.20 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'premmerce_wizard_actions' AJAX Endpoint
Media
CVE-2026-1608
Video Onclick <= 0.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2026-1570
Simple Bible Verse via Shortcode <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2026-1611
Wikiloops Track Player <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2026-1634
Subitem AL Slider <= 1.0.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Media
CVE-2026-1082
TITLE ANIMATOR <= 1.0 - Cross-Site Request Forgery to Settings Update
Media
CVE-2026-1675
Advanced Country Blocker <= 2.3.1 - Unauthenticated Authorization Bypass via Insecure Default Secret Key
Media
CVE-2026-1573
OMIGO <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2026-1643
MP-Ukagaka <= 1.5.2 - Reflected Cross-Site Scripting
Media
CVE-2026-1613
Wonka Slide <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Alta
CVE-2026-25762
AdonisJS vulnerable to Denial of Service (DoS) via Unrestricted Memory Buffering in PartHandler during File Type Detection
Crítica
ghsa-4f84-67cv-qrv3
A single post-release of dydx-v4-client contained obfuscated multi-stage loader
Alta
CVE-2026-25754
AdonisJS multipart body parsing has Prototype Pollution issue
Alta
CVE-2026-25725
Claude Code has Sandbox Escape via Persistent Configuration Injection in settings.json
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.