Media
CVE-2026-22350
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Alta
CVE-2025-69396
Splendour <= 1.23 - Unauthenticated Local File Inclusion
Alta
CVE-2026-22346
Slider Responsive Slideshow – Image slider, Gallery slideshow <= 1.5.4 - Authenticated (Contributor+) PHP Object Injection
Media
CVE-2025-68514
Paid Member Subscriptions <= 2.16.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
Alta
CVE-2026-1104
FastDup – Fastest WordPress Migration & Duplicator <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and Download
Alta
CVE-2025-69407
Struktur <= 2.5.1 - Unauthenticated Local File Inclusion
Alta
CVE-2025-69406
FreightCo <= 1.1.7 - Unauthenticated Local File Inclusion
Alta
CVE-2025-69410
Belletrist <= 1.2 - Unauthenticated Local File Inclusion
Alta
CVE-2025-69408
HealthFirst <= 1.0.1 - Unauthenticated Local File Inclusion
Media
CVE-2026-39517
Blog Filter <= 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-32344
Corpiva <= 1.0.96 - Cross-Site Request Forgery
Alta
CVE-2025-69397
Tint <= 1.7 - Unauthenticated Local File Inclusion
Media
CVE-2026-2608
Gutenberg Blocks by Kadence Blocks <= 3.5.32 - Missing Authorization
Media
CVE-2025-69394
Cnvrse < 026.02.10.20 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2026-39621
SpicePress <= 2.3.2.5 - Cross-Site Request Forgery
Alta
CVE-2025-15096
Videospirecore Theme Plugin <= 1.0.6 - Authenticated (Subscriber+) Privilege Escalation via User Email Change/Account Takeover
Media
CVE-2026-2295
WPZOOM Addons for Elementor – Starter Templates & Widgets <= 1.3.2 - Unauthenticated Protected Post Exposure via ajax_post_grid_load_more
Media
CVE-2026-1853
BuddyHolis ListSearch <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'placeholder' Shortcode Attribute
Media
CVE-2026-1827
IDE Micro code-editor <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute
Media
CVE-2026-1804
WDES Responsive Popup <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'attr' Shortcode Attribute
Media
CVE-2026-1748
Invoct – PDF Invoices & Billing for WooCommerce <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Information Exposure
Media
CVE-2026-1215
MMA Call Tracking <= 2.3.15 - Cross-Site Request Forgery to Plugin Settings Update
Media
CVE-2026-0724
WPlyr Media Block <= 1.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via '_wplyr_accent_color' Parameter
Media
CVE-2026-1885
Slideshow Wp <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sswp-slide' Shortcode 'sswpid' Attribute
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.