Alta
CVE-2026-1320
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Alta
CVE-2026-1316
Customer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter
Media
CVE-2026-39629
Uminex <= 1.0.9 - Unauthenticated Arbitrary Shortcode Execution
Crítica
CVE-2026-2418
Login with Salesforce <= 1.0.2 - Authentication Bypass
Media
CVE-2026-25036
Passster <= 4.2.25 - Missing Authorization
Media
CVE-2026-39627
Ashe <= 2.267 - Missing Authorization
Media
CVE-2026-39575
Custom Query Blocks <= 5.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-39628
DukaMarket <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution
Media
CVE-2026-1671
Activity Log for WordPress <= 1.2.8 - Missing Authorization to Sensitive Information Exposure via Log File
Media
CVE-2025-69873
ajv has ReDoS when using `$data` option
Media
CVE-2026-1356
Converter for Media – Optimize images | Convert WebP & AVIF <= 6.5.1 - Unauthenticated Server-Side Request Forgery via src
Alta
CVE-2026-25990
Pillow affected by out-of-bounds write when loading PSD images
Media
CVE-2025-69874
nanotar is vulnerable to path traversal in parseTar() and parseTarGzip()
Alta
CVE-2026-25759
Statamic CMS vulnerable to privilege escalation via stored cross-site scripting
Sin evaluar
CVE-2026-2349
drupal/ui_icons - SA-CONTRIB-2026-010
Media
CVE-2026-25633
Statamic CMS's missing authorization allows access to assets
Sin evaluar
CVE-2026-2348
drupal/quickedit - SA-CONTRIB-2026-009
Media
CVE-2018-25157
Phraseanet vulnerable to stored cross-site scripting through crafted file names
Media
CVE-2019-25317
Kimai 2 vulnerable to persistent cross-site scripting in the timesheet descriptions
Crítica
CVE-2026-26021
set-in Affected by Prototype Pollution
Media
CVE-2026-26019
@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation
Alta
CVE-2026-26010
Leaky JWTs in OpenMetadata exposing highly-privileged bot users
Media
CVE-2026-1537
LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.6 - Missing Authorization to Booking Details Exposure
Crítica
CVE-2026-1729
AdForest <= 6.0.12 - Authentication Bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.