Búsqueda de CVEs

363.843 resultados
CVE-2026-54826HIGHWordPress SupportCandy plugin <= 3.4.6 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-54825CRITICALWordPress wpDataTables plugin <= 7.4 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-54824HIGHWordPress Ads by WPQuads plugin <= 3.0.3 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-54820CRITICALWordPress JetBooking plugin <= 4.0.4.1 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-52701MEDIUMWordPress User Registration plugin <= 5.2.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-24547MEDIUMWordPress SiteGround Email Marketing plugin <= 1.7.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-68075MEDIUMWordPress BNE Testimonials plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68074MEDIUMWordPress Image Carousel plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68064HIGHWordPress Goya Core plugin < 1.0.9.4 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2025-68063HIGHWordPress Splash - Sport Club WordPress theme for Basketball, Football, Hockey theme <= 4.4.3 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2025-68052HIGHWordPress Eagle Booking plugin <= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2025-66123MEDIUMWordPress BookPro plugin <= 1.1.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2025-64637MEDIUMWordPress Auros Core plugin <= 5.3.1 - Content Injection vulnerabilityEPSS 0.2%CVE-2025-64636MEDIUMWordPress Donation Thermometer plugin <= 2.2.7 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-63079MEDIUMWordPress Live Copy Paste for Elementor plugin <= 1.5.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-63078MEDIUMWordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-63041MEDIUMWordPress Forget About Shortcode Buttons plugin <= 2.1.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-45257HIGHArbitrary file overwrite via the KTLS receive pathEPSS 0.2%CVE-2026-4339MEDIUMSSRF via unvalidated attachment URLs in Mattermost Agents plugin MCP serverEPSS 0.1%CVE-2026-9699MEDIUMMattermost Agents plugin logs unsanitized OpenAI API keys on authentication errorsEPSS 0.3%