Baja
CVE-2026-61859
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Baja
CVE-2026-61858
ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check
Baja
CVE-2026-61857
ImageMagick: Heap-use-after-free via XMP profile could result in a crash
Media
ghsa-hc76-7mpc-qjqh
ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797
Media
ghsa-56m6-8q75-f2rw
ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219
Baja
CVE-2026-61465
ImageMagick: Policy Bypass possible with matrix-backed operations
Alta
CVE-2026-55685
React Router: Unauthenticated Denial of Service via Inefficient Route Matching
Media
CVE-2026-55628
ImageMagick: Policy Bypass in concatenate operation due to missing checks
Media
CVE-2026-55597
ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments
Media
CVE-2026-55595
ImageMagick: Infinite Loop in connected-components when providing invalid arguments
Media
CVE-2026-55594
ImageMagick: Stack Overflow in MVG decoder due to missing depth check.
Alta
CVE-2026-55575
LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforce
Media
CVE-2026-55510
ImageMagick: Use-After-Free in crafted 8BIM when identifying an image
Alta
CVE-2026-54673
electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
Alta
CVE-2026-54672
electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`
Alta
CVE-2026-16572
LogMyTrip <= 1.9 - Unauthenticated SQL Injection
Alta
CVE-2026-16060
Insert or Embed Articulate Content into WordPress <= 4.3000000027 - Authenticated (Editor+) Arbitrary File Upload
Media
CVE-2026-15260
Geo My WP <= 4.5.5.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Geolocation Record Modification and Deletion
Media
CVE-2026-16300
Chama <= 1.0.12 - Missing Authorization
Alta
CVE-2026-15931
Simple Membership <= 4.7.7 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-65564
MapPress – Google Maps, OpenStreetMap & Leaflet <= 2.97.6 - Unauthenticated Information Exposure
Alta
CVE-2026-59553
Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces <= 7.6.1 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-12965
Super Store Finder <= 7.10 - Unauthenticated SQL Injection
Media
CVE-2026-15930
Simple Membership <= 4.7.7 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.