Alta
CVE-2026-44486
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2026-10804
A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/runtime/caching/hashing.py of the component Palette Handler. Such manipulation le
Baja
CVE-2026-10803
A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digest_utils of the file mlflow/data/digest_utils.py of the component Dataset Digest Computation. This manipul
Baja
CVE-2026-10802
Keystone: GraphQL API Endpoint Lacks Query Depth Limits
Alta
CVE-2026-10586
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery
Baja
CVE-2026-10783
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of wea
Alta
CVE-2026-10821
Yoast SEO Premium <= 27.6.0 - Authenticated (Author+) Remote Code Execution
Crítica
CVE-2026-10735
Multiple ShapedPlugin Plugins < (Various Versions) - Backdoored Software
Alta
CVE-2026-49774
RD Station <= 5.6.0 - Authenticated (Contributor+) Remote Code Execution
Media
CVE-2026-49773
FV Flowplayer Video Player < 7.5.51.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Alta
CVE-2019-25737
Live Chat Unlimited <= 2.8.3 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-5305
Email Encoder < 0.3.12 (premium) < 1.0.25 (free) - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-49077
Wp EMember <= v10.2.2 - Unauthenticated Information Exposure
Alta
CVE-2026-49107
Thrive Apprentice < 10.8.10.2 - Unauthenticated PHP Object Injection
Alta
CVE-2026-49769
wpForo Forum <= 3.1.0 - Unauthenticated PHP Object Injection
Alta
CVE-2026-49770
WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.7.12 - Unauthenticated PHP Object Injection
Media
CVE-2026-32834
Easy PayPal Events & Tickets <= 1.3 - Unauthenticated Information Exposure
Alta
CVE-2019-25745
WP Google Review Slider <= 6.1 - Unauthenticated SQL Injection
Media
CVE-2026-8380
Frontend File Manager <= 23.6 - Missing Authorization to Authenticated (Author+) Arbitrary Post Deletion
Alta
CVE-2026-49113
Cornerstone < 7.8.8 - Authenticated (Subscriber+) Arbitrary Code Execution
Media
CVE-2026-10824
Masteriyo LMS <= 2.2.0 - Missing Authorization to Unauthenticated Course Progress Disclosure and Deletion
Alta
CVE-2026-49776
GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites <= 2.32.6 - Unauthenticated SQL Injection
Crítica
CVE-2026-9690
Media folder Addon <= 4.0.1 - Unauthenticated Arbitrary File Download
Media
CVE-2026-49110
Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. <= 3.1.4 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.