Media
CVE-2026-6391
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Crítica
CVE-2026-6555
ProSolution WP Client <= 2.0.0 - Unauthenticated Arbitrary File Upload via 'files'
Media
CVE-2026-8038
Faces of Users <= 0.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'default' Shortcode Attribute
Media
CVE-2026-6072
Oliver POS <= 2.4.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to 'OliverAuth' Header
Media
CVE-2026-5293
診断ジェネレータ作成プラグイン <= 1.4.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'js' Parameter
Media
CVE-2026-8922
Keycloak: Revoked Tokens Can Remain Active When Both Realm-Level and Client-Level `notBefore` Revocation Policies are Configured
Media
CVE-2026-8830
Keycloak: Policy bypass during WebAuthn credential registration via client-side JavaScript manipulation
Alta
CVE-2026-8073
Kirki <= 6.0.6 - Unauthenticated Limited Arbitrary File Read and Deletion via downloadZIP
Media
CVE-2026-8096
Kirki <= 6.0.6 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Submission Data Exposure via 'kirki_wp_admin_get_apis' Action
Alta
CVE-2026-3430
Creative Mail <= 1.6.9 - Unauthenticated SQL Injection
Media
CVE-2026-47100
FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.2 - Missing Authorization
Media
CVE-2026-45442
The Ultimate Video Player For WordPress – by Presto Player <= 4.1.3 - Missing Authorization
Alta
CVE-2026-42727
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.8 - Unauthenticated SQL Injection
Media
CVE-2026-45435
WP Activity Log <= 5.6.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2026-4986
WPForms Lite <= 1.10.0.4 - Unauthenticated Payment Bypass
Media
CVE-2026-45245
Summarize's hover summary feature allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links
Baja
CVE-2026-45244
Summarize contains a missing authorization vulnerability
Alta
CVE-2026-45242
Summarize contains a path traversal vulnerability
Media
CVE-2026-45243
Summarize contains a missing authorization vulnerability
Media
CVE-2026-46559
ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.
Media
CVE-2026-46557
ImageMagick: Stack overflow in fx operation
Media
CVE-2026-46523
ImageMagick: Use-After-Free in MSL decoder.
Alta
CVE-2026-46522
ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion
Media
CVE-2026-46521
ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.