Media
CVE-2026-16289
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Media
CVE-2026-13340
SVG Support <= 2.5.16 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2026-65563
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More <= 3.0.7 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2025-15673
Import and export users and customers < 2.4.3 - Authenticated (Admin+) Arbitrary File Read
Media
CVE-2026-16539
SM Page Duplicator <= 1.0.0 - Authenticated (Editor+) SQL Injection
Alta
CVE-2026-59556
Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.11 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-15231
TaxoPress <= 3.50.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Private Post Disclosure
Media
CVE-2026-16297
Clearfy <= 2.4.2 - Authenticated (Administrator+) PHP Object Injection
Alta
CVE-2026-16623
Create Block <= 2.9.0 - Code Injection to Authenticated (Admin+) PHP Code Injection
Media
CVE-2026-16564
Dokan <= 5.0.8 - Insecure Direct Object Reference to Authenticated (Vendor+) Arbitrary Order Status Modification
Media
CVE-2026-16563
Academy LMS <= 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Lesson Content Disclosure
Crítica
CVE-2026-16618
ImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload
Media
CVE-2026-65562
BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2026-17032
Multiple Supsystic Pro Plugins <= 1.6.0 - Backdoored Software via Compromised Vendor Software
Media
CVE-2026-65561
miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-65557
Abandoned Cart Lite for WooCommerce <= 6.8.0 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Media
CVE-2026-16565
Dokan <= 5.0.8 - Insecure Direct Object Reference to Authenticated (Vendor+) Cross-Vendor Product Attribute Modification
Media
CVE-2026-65568
Visual Composer Website Builder <= 45.15.0 - Missing Authorization
Crítica
CVE-2026-14557
SoftMarket <= 1.0.0 - Unauthenticated Privilege Escalation via Account Takeover
Media
CVE-2026-65567
Event Tickets and Registration <= 5.29.0.1 - Missing Authorization
Crítica
CVE-2026-16250
Personal QR Message <= 1.0 - Unauthenticated Arbitrary File Upload
Media
CVE-2026-59557
Events Made Easy <= 3.1.3 - Missing Authorization
Alta
CVE-2026-65558
AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking <= 2.3.5 - Unauthenticated Server-Side Request Forgery
Alta
CVE-2026-15383
Blog Floating Button <= 1.4.20 - Unauthenticated Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.