Media
CVE-2026-28042
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Alta
CVE-2026-28021
Craftis - Handcraft & Artisan Elementor Template Kit <= 1.2.8 - Unauthenticated Local File Inclusion
Media
CVE-2026-32433
CP Contact Form with Paypal <= 1.3.61 - Authenticated (Contributor+) SQL Injection
Alta
CVE-2026-28031
Invetex <= 2.18 - Unauthenticated Local File Inclusion
Media
CVE-2026-39714
G5Plus April <= 6.8 - Missing Authorization
Media
CVE-2026-39711
RT-Theme 18 | Extensions <= 2.5 - Unauthenticated Information Exposure
Alta
CVE-2026-27992
Meals & Wheels <= 1.1.12 - Unauthenticated Local File Inclusion
Media
CVE-2026-32435
VW Pet Shop <= 1.4.7 - Missing Authorization
Alta
CVE-2026-28028
MoneyFlow <= 1.0 - Unauthenticated Local File Inclusion
Crítica
CVE-2026-27983
LMS Elementor Pro <= 1.0.4 - Unauthenticated Privilege Escalation
Alta
CVE-2026-28017
Green Thumb <= 1.1.12 - Unauthenticated Local File Inclusion
Media
CVE-2026-39709
The Tribal <= 1.3.4 - Unauthenticated Information Exposure
Alta
CVE-2026-28045
N7 | Golf Club Sports & Events <= 2.16.0 - Unauthenticated Local File Inclusion
Alta
CVE-2026-28007
Coinpress <= 1.0.14 - Unauthenticated Local File Inclusion
Alta
CVE-2026-27991
Avventure <= 1.1.12 - Unauthenticated Local File Inclusion
Alta
CVE-2026-27997
Maxify <= 1.0.16 - Unauthenticated Local File Inclusion
Alta
CVE-2026-28012
Gridiron <= 1.0.14 - Unauthenticated Local File Inclusion
Media
CVE-2026-32437
VW Portfolio <= 1.3.3 - Missing Authorization
Alta
CVE-2026-27988
Equadio <= 1.1.3 - Unauthenticated Local File Inclusion
Alta
CVE-2026-28426
Statamic vulnerable to privilege escalation via stored cross-site scripting
Alta
CVE-2026-28425
Statamic vulnerable to remote code execution via Antlers-enabled control panel inputs
Media
CVE-2026-28424
Statamic's missing authorization allows access to email addresses
Media
CVE-2026-28423
Statamic Vulnerable to Server-Side Request Forgery via Glide
Alta
CVE-2026-3304
Multer vulnerable to Denial of Service via incomplete cleanup
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.