Media
CVE-2025-58982
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtros
Crítica
CVE-2025-10690
Goza - Nonprofit Charity WordPress Theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation
Alta
CVE-2025-9539
AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress <= 5.3.6 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation
Media
CVE-2025-9542
AutomatorWP <= 5.3.7 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions
Alta
CVE-2025-60213
Scape <= 1.5.13 - Unauthenticated PHP Object Injection
Media
CVE-2025-58822
WP Mail <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-49362
Gracioza <= 1.0.15 - Unauthenticated Local File Inclusion
Alta
CVE-2025-49360
Militarology <= 1.0.15 - Unauthenticated Local File Inclusion
Media
CVE-2025-48102
GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership <= 1.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-58800
WP Email Template <= 2.8.6 - Cross-Site Request Forgery
Alta
CVE-2025-49367
Monyxi <= 1.1.8 - Unauthenticated Local File Inclusion
Alta
CVE-2025-49361
Mamita <= 1.0.9 - Unauthenticated Local File Inclusion
Alta
CVE-2025-49371
Strux <= 1.9 - Unauthenticated Local File Inclusion
Media
CVE-2025-9085
User Registration & Membership <= 4.3.0 - Authenticated (Admin+) SQL Injection
Alta
CVE-2025-49369
Lettuce <= 1.1.7 - Unauthenticated Local File Inclusion
Alta
CVE-2025-49363
Kings & Queens <= 1.1.16 - Unauthenticated Local File Inclusion
Alta
CVE-2025-49359
ShieldGroup <= 2.13 - Unauthenticated Local File Inclusion
Media
CVE-2025-58829
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One <= 2.3.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Alta
CVE-2025-49365
Jack Well <= 1.0.14 - Unauthenticated Local File Inclusion
Media
CVE-2025-58815
Aitasi Coming Soon <= 2.0.2 - Authenticated (Administrator+) PHP Object Injection
Media
CVE-2025-58839
eDS Responsive Menu <= 1.2 - Authenticated (Administrator+) PHP Object Injection
Media
CVE-2025-58862
WordPress Events Calendar Plugin – connectDaily <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-49364
Ludos Paradise <= 2.1.3 - Unauthenticated Local File Inclusion
Alta
CVE-2025-49368
Palladio <= 1.1.10 - Unauthenticated Local File Inclusion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.