Media
CVE-2026-11592
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.540
Alta
CVE-2026-57516
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
Media
CVE-2026-13704
GiveWP <= 4.16.1 - Authenticated (Give Worker+) Stored Cross-Site Scripting via Sequioa Form
Alta
CVE-2026-14249
Request a Quote Form Plugin <= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter
Media
CVE-2026-13357
Houzez Property Feed <= 2.5.46 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Crítica
CVE-2026-15158
Blocksy Companion <= 2.1.46 - Subida no autenticada de archivos arbitrarios a través del parámetro 'blc-review-images[]'
Una vulnerabilidad crítica en Blocksy Companion permite a atacantes no autenticados subir archivos arbitrarios, lo que puede provocar la ejecución remota de código si la versión premium tiene activas extensiones específicas.
Media
CVE-2026-14322
Timetics <= 1.0.56 - Missing Authorization to Unauthenticated Booking Approval
Alta
CVE-2026-57360
eCommerce Product Catalog Plugin for WordPress <= 3.5.4 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-57351
HandL UTM Grabber / Tracker <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-57355
Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Missing Authorization
Alta
CVE-2026-57426
Modula - PRO <= 2.10.8 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-57352
ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce <= 2.2.0 - Missing Authorization
Alta
CVE-2026-57359
ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema <= 2.3.10 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-57356
MoreConvert Wishlist for WooCommerce <= 1.9.19 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-57722
Enable Media Replace <= 4.2.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Media
CVE-2026-57721
ApplyOnline – Application Form Builder and Manager <= 2.6.7.6 - Missing Authorization
Media
CVE-2026-5348
Academy LMS <= 3.8.1 - Unauthenticated Insecure Direct Object Reference to Private Topic Disclosure
Alta
CVE-2026-12968
Product Addons – WowAddons <= 1.6.14 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-27409
Advanced Booking & Appointment System – Webba Booking Calendar <= 6.4.13 - Missing Authorization
Media
CVE-2026-57720
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More <= 6.3.2 - Missing Authorization
Media
CVE-2026-57731
Flatsome <= 3.20.5 - Missing Authorization
Media
CVE-2026-57347
MotoPress Hotel Booking <= 6.0.3 - Authenticated (Subscriber+) Information Exposure
Media
CVE-2026-57348
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 3.0.4 - Unauthenticated Server-Side Request Forgery
Crítica
CVE-2026-5524
Divi Form Builder <= 5.1.8 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via 'acceptFileTypes' Parameter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.