Alta
CVE-2026-49069
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Alta
CVE-2026-49074
JetEngine <= 3.8.9.1 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-49066
Conekta Payment Gateway <= 6.0.0 - Unauthenticated Information Exposure
Crítica
CVE-2026-49063
Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 5.5.0 - Unauthenticated Privilege Escalation
Alta
CVE-2026-49080
wpDataTables (Premium) <= 7.3.6 - Unauthenticated SQL Injection
Alta
CVE-2026-49075
JetEngine <= 3.8.9.1 - Authenticated (Contributor+) PHP Object Injection
Media
CVE-2026-49071
WooCommerce Dropshipping Premium <= 5.2.4 - Missing Authorization
Alta
CVE-2026-49772
The Events Calendar 6.15.12-6.16.2 - Unauthenticated SQL Injection
Media
CVE-2026-49064
Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.49 - Unauthenticated Information Exposure
Alta
CVE-2026-10083
APCu Manager <= 4.4.0 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-49067
Advanced 301 and 302 Redirect <= 1.6.9 - Unauthenticated SQL Injection
Media
CVE-2026-49062
Faust.js <= 1.8.7 - Missing Authorization
Media
CVE-2026-52692
Affiliates Manager <= 2.9.50 - Unauthenticated Information Exposure
Alta
CVE-2026-49084
JetEngine < 3.8.9.1 - Unauthenticated SQL Injection
Media
CVE-2026-49070
Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more <= 9.4.0.0 - Missing Authorization
Media
CVE-2026-49065
Hippoo Mobile App for WooCommerce <= 1.9.5 - Missing Authorization
Media
CVE-2026-49072
WooCommerce Anti-Fraud <= 7.2.6 - Missing Authorization
Alta
CVE-2026-49111
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation
Media
CVE-2026-49073
Booking (Reservation & Appointment) <= 3.0.3 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2026-3011
Recipe Card Blocks Lite <= 3.4.13 - Authenticated (Author+) Stored Cross-Site Scripting via 'summary' and 'notes'
Media
CVE-2021-47983
Accept Stripe Payments <= 2.0.39 - Authenticated (Admin+) Stored Cross-Site Scripting
Crítica
CVE-2024-58348
Background Image Cropper <= 1.2 - Unauthenticated Remote Code Execution
Media
CVE-2026-10820
ProfilePress <= 4.16.16 - Insecure Direct Object Reference to Authenticated (Subscriber+) Subscription Cancellation
Alta
CVE-2026-9851
Booking Package <= 1.7.16 - Authenticated (Editor+) Privilege Escalation via Account Takeover to updateUser AJAX Action
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.