Media
CVE-2026-25320
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Media
CVE-2026-25319
Zita Site Library for Elementor <= 1.6.6 - Cross-Site Request Forgery
Media
CVE-2026-25015
UsersWP <= 1.2.53 - Cross-Site Request Forgery
Alta
CVE-2025-69367
Oyster - Photography WordPress <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2025-67978
Educare <= 1.6.1 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-24765
PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling
Media
CVE-2026-24134
StudioCMS has Authorization Bypass Through User-Controlled Key
Alta
CVE-2026-0844
Simple User Registration <= 6.7 - Authenticated (Subscriber+) Privilege Escalation via profile_save_field
Alta
CVE-2026-1280
Frontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter
Media
CVE-2026-1380
Bitcoin Donate Button <= 1.0 - Cross-Site Request Forgery to Settings Update
Media
CVE-2026-1391
Vzaar Media Management <= 1.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Media
CVE-2026-1377
imwptip <= 1.1 - Cross-Site Request Forgery to Settings Update
Media
CVE-2025-14616
Recooty <= 1.0.6 - Cross-Site Request Forgery to Settings Update
Alta
CVE-2026-15298
TelSender <= 1.14.14 - Unauthenticated Stored Cross-Site Scripting via Telegram Chat Title
Media
CVE-2026-1398
Change WP URL <= 1.0 - Cross-Site Request Forgery to Settings Update
Media
CVE-2026-1399
WP Google Ad Manager Plugin <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Admin Settings
Media
CVE-2025-15511
Rupantorpay <= 2.0.0 - Missing Authorization to Unauthenticated Order Status Modification
Media
CVE-2025-14063
SEO Links Interlinking <= 1.7.9.9.1 - Reflected Cross-Site Scripting via 'google_error' Parameter
Media
CVE-2025-14283
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library <= 2.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-14386
Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization 2.4.4 - 2.5.15 - Missing Authorization to Authenticated (Subscriber+) Authentication Bypass via Account Takeover
Alta
CVE-2026-24747
PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.
Crítica
CVE-2026-23830
SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor
Media
CVE-2026-1381
Order Minimum/Maximum Amount Limits for WooCommerce <= 4.6.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Hide Add to Cart Content Fields
Media
CVE-2026-1053
Ivory Search <= 5.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_gcse' and 'nothing_found_text' Parameters
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.