Media
CVE-2026-105056
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.529
Media
CVE-2026-104408
Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.8.3 - Authenticated (Custom Role+) SQL Injection
Media
CVE-2026-103335
Video Conferencing with Zoom <= 4.6.10 - Authenticated (Subscriber+) Information Exposure
Media
CVE-2026-105055
WP Mailster <= 1.9.0.0 - Missing Authorization
Media
CVE-2026-105062
WP Admin Audit <= 1.2.17 - Missing Authorization
Media
CVE-2026-103078
JS Help Desk – AI-Powered Support & Ticketing System <= 4.0.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Media
CVE-2026-104407
PowerPress Podcasting plugin by Blubrry <= 11.17.9 - Cross-Site Request Forgery
Media
CVE-2026-104386
WPVR – 360 Panorama viewer and Virtual Tour Builder for WordPress <= 9.1.3 - Missing Authorization
Media
CVE-2026-105069
QR Redirector <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-104404
GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-105068
Events Manager – Calendar, Bookings, Tickets, Appointments and more! <= 7.4.5 - Unauthenticated Information Exposure
Media
CVE-2026-104400
bBlocks – Essential Gutenberg Blocks & Patterns Collection <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-104409
Image Photo Gallery Final Tiles Grid <= 3.6.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-82212
Nexi XPay Build 7.2.2 - 7.6.2 - Unauthenticated Payment Bypass
Media
CVE-2026-82211
Nexi XPay Build 7.0.0 - 7.6.2 - Missing Authorization
Media
CVE-2026-39772
Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms <= 5.2.8 - Missing Authorization
Media
CVE-2026-103378
Geliver Akıllı Kargo Pazaryeri 3.0.0 - 3.1.0 - Unauthenticated Information Exposure
Alta
CVE-2026-39759
Workreap Core <= 3.4.5 - Authenticated (Employer / Sales Representative+) Arbitrary File Upload
Media
CVE-2026-97071
CURCY – Multi Currency for WooCommerce <= 2.2.17 - Missing Authorization
Media
CVE-2026-104953
MPG <= 4.2.2 - Authenticated (Editor+) SQL Injection
Media
CVE-2026-105057
Zero Spam for WordPress <= 5.7.11 - Unauthenticated Spam Protection Bypass on Login
Media
CVE-2026-97308
Login Lockdown & Protection <= 2.17 - Unauthenticated Login Lockout Protection Bypass
Media
CVE-2026-39793
Simple JWT Login – Allows you to use JWT on REST endpoints. 4.0.0 - Missing Authorization
Media
CVE-2026-94669
Fluent Forms Pro Add On Pack <= 6.2.13 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.