Media
CVE-2026-66601
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Alta
CVE-2026-66616
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-61986
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 30.0.5 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-66582
TranslatePress – Translate Multilingual sites with AI Translation <= 3.3.2 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-73387
Resido - Real Estate WordPress Theme <= 1.5 - Unauthenticated Local File Inclusion
Alta
CVE-2026-73347
TrueBooker – Appointment Booking and Scheduler System <= 1.2.6 - Unauthenticated Privilege Escalation
Alta
CVE-2026-66592
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection
Alta
CVE-2026-73185
NGG Smart Image Search < 4.0.0 - Unauthenticated SQL Injection
Alta
CVE-2026-66590
Tagembed: Social Media Feeds and Customer Reviews Widget <= 7.4 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2025-53999
Altair <= 5.2.2 - Missing Authorization
Alta
CVE-2026-73992
Query Wrangler <= 1.5.57 - Authenticated (Subscriber+) Remote Code Execution
Alta
CVE-2026-66609
TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme <= 5.12.3 - Unauthenticated SQL Injection
Alta
CVE-2026-66598
B2Bking <= 5.6.07 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-19842
SAML Single Sign On – SSO Login 4.8.85-5.4.6 - Unauthenticated Privilege Escalation
Alta
CVE-2026-73354
SimplyRETS Real Estate IDX <= 3.2.8 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-73388
Nikstore Core <= 1.5 - Unauthenticated SQL Injection
Alta
CVE-2026-28150
Golo Framework < 1.7.5 - Unauthenticated Local File Inclusion
Media
CVE-2026-66668
Community by PeepSo – Download from PeepSo.com <= 9.0.5.2 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2026-73183
Maps Marker Pro <= 4.32 - Unauthenticated SQL Injection
Alta
CVE-2026-73184
Global Gallery - WordPress Responsive Gallery <= 11.1.2 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-66595
WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards <= 5.5.80 - Missing Authorization
Crítica
CVE-2026-66613
JetEngine <= 3.8.14 - Unauthenticated Remote Code Execution
Media
CVE-2026-73998
WP w3all phpBB <= 3.0.5 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2026-66611
Paymob for WooCommerce <= 4.1.10 - Unauthenticated Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.