Crítica
CVE-2026-25053
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2026-1246
ShortPixel Image Optimizer <= 6.4.2 - Authenticated (Editor+) Arbitrary File Read via 'loadFile' Parameter
Crítica
CVE-2026-25052
n8n's Improper File Access Controls Allow Arbitrary File Read by Authenticated Users
Alta
CVE-2026-25051
n8n's Improper CSP Enforcement in Webhook Responses May Allow Stored XSS
Crítica
CVE-2026-25049
n8n Has Expression Escape Vulnerability Leading to RCE
Alta
CVE-2026-23897
Apollo Serve vulnerable to Denial of Service with `startStandaloneServer`
Crítica
CVE-2026-21893
n8n Vulnerable to Command Injection in Community Package Installation
Alta
CVE-2025-61917
n8n's Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner
Sin evaluar
CVE-2026-1917
drupal/login_disable - SA-CONTRIB-2026-008
Media
CVE-2026-1622
Neo4j Enterprise and Community vulnerable to a potential information disclosure
Alta
CVE-2025-13192
Popup builder with Gamification <= 2.2.0 - Unauthenticated SQL Injection via Multiple REST API Endpoints
Media
CVE-2025-68834
Sync Master Sheet – Product Sync with Google Sheet for WooCommerce <= 1.1.3 - Missing Authorization
Media
CVE-2025-68024
Addonify – WooCommerce Wishlist <= 2.0.15 - Missing Authorization to Unauthenticated Settings Update
Alta
CVE-2025-67982
Urna <= 2.5.12 - Unauthenticated Local File Inclusion
Alta
CVE-2025-68841
TopperPack – Complete Elementor Addons, Theme & CPT Builder <= 1.2.1 - Unauthenticated Local File Inclusion
Media
CVE-2025-68022
Plugin BlueX for WooCommerce <= 3.1.4 - Missing Authorization
Media
CVE-2025-68023
Addonify – Compare Products For WooCommerce <= 1.1.17 - Missing Authorization to Unauthenticated Settings Update
Alta
CVE-2025-69373
VidoRev <= 2.9.9.9.9.9.7 - Unauthenticated Local File Inclusion
Media
CVE-2026-24988
The Events Calendar Shortcode & Block <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-68853
Contact Manager <= 9.1 - Unauthenticated PHP Object Injection
Alta
CVE-2025-67981
Besa <= 2.3.15 - Unauthenticated Local File Inclusion
Alta
CVE-2026-25027
Unicamp <= 2.7.1 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2025-69324
NEX-Forms <= 9.1.7 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2025-67980
Hara <= 1.2.17 - Unauthenticated Local File Inclusion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.