Crítica
CVE-2025-26735
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Alta
CVE-2025-26872
Eximius <= 2.2 - Authenticated (Subscriber+) Arbitrary File Upload
Crítica
CVE-2025-32660
JS Job Manager <= 2.0.2 - Unauthenticated Arbitrary File Upload
Alta
CVE-2025-32657
Testimonial Slider And Showcase Pro <= 2.1.7 - Authenticated (Subscriber+) Local File Inclusion
Alta
CVE-2025-26892
Celestial Aura <= 2.2 - Authenticated (Subscriber+) Arbitrary File Upload
Crítica
CVE-2025-26894
Coming Soon, Maintenance Mode <= 1.1.1 - Unauthenticated Local File Inclusion
Media
CVE-2025-26990
Royal Elementor Addons <= 1.7.1006 - Authenticated (Admin+) Server Side Request Forgery
Alta
CVE-2025-27011
Booking and Rental Manager <= 2.2.8 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2025-32579
Sync Posts <= 1.0 - Authenticated (Subscriber+) Arbitrary File Upload
Crítica
CVE-2025-31030
Ray Enterprise Translation <= 1.7.0 - Unauthenticated Local File Inclusion
Alta
CVE-2025-32652
Solace Extra <= 1.3.1 - Authenticated (Subscriber+) Arbitrary File Upload
Media
CVE-2025-32520
WordPress Health and Server Condition – Integrated with Google Page Speed <= 4.1.1 - Reflected Cross-Site Scripting
Alta
CVE-2025-22279
JetCompareWishlist <= 1.5.9 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2025-2636
InstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File Inclusion
Crítica
CVE-2025-26927
AI Hub - Startup & Technology WordPress Theme <= 1.3.7 - Unauthenticated Arbitrary File Upload
Alta
CVE-2025-31411
Linet ERP-Woocommerce Integration <= 3.5.12 - Authenticated (Admin+) Arbitrary File Read & Deletion
Media
CVE-2025-32691
PowerPress Podcasting <= 11.12.6 - Authenticated (Contributor+) Server-Side Request Forgery
Alta
CVE-2025-32499
Logo Showcase Ultimate <= 1.4.4 - Authenticated (Contributor+) Local File Inclusion
Crítica
CVE-2025-31015
WordPress SMTP Service, Email Delivery Solved! — MailHawk <= 1.3.1 - Unauthenticated Local File Inclusion
Media
CVE-2025-32675
SEO Help <= 6.6.1 - Authenticated (Admin+) Server-Side Request Forgery
Crítica
CVE-2025-32672
Ultimate Bootstrap Elements for Elementor <= 1.4.9 - Unauthenticated Local File Inclusion
Alta
CVE-2025-30964
Photography <= 7.5.2 - Unauthenticated Server-Side Request Forgery
Alta
CVE-2025-31014
Material Dashboard <= 1.4.5 - Authenticated (Subscriber+) Local File Inclusion
Alta
CVE-2025-32642
Vite Coupon <= 1.0.9 - Cross-Site Request Forgery to Remote Code Execution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.