Media
CVE-2025-68884
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Media
CVE-2025-68007
Event Espresso 4 Decaf <= 5.0.37.decaf - Missing Authorization to Unauthenticated Settings Change
Media
CVE-2026-1003
GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools <= 4.3.0 - Missing Authorization to Authenticated (Author+) Arbitrary Post Deletion
Media
CVE-2025-68896
WDV One Page Docs <= 1.2.4 - Missing Authorization
Alta
CVE-2025-68034
CleverReach® WP <= 1.5.21 - Unauthenticated SQL Injection
Media
CVE-2026-25473
WZone <= 14.0.31 - Missing Authorization
Media
CVE-2026-24596
Related Posts Thumbnails Plugin for WordPress <= 4.3.2 - Cross-Site Request Forgery
Media
CVE-2026-22335
WooCommerce Frontend Manager – Ultimate < 6.7.7 - Authenticated (Subscriber+) SQL Injection
Crítica
CVE-2025-68015
Event Tickets with Ticket Scanner <= 2.8.5 - Unauthenticated Remote Code Execution
Media
CVE-2026-24599
NextMove Lite <= 2.23.0 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2025-68003
Shown Connector <= 1.2.10 - Missing Authorization to Unauthenticated Settings Update
Baja
CVE-2025-14457
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.2 - Missing Authorization to Unauthenticated File Deletion
Media
CVE-2025-14448
WP-Members Membership Plugin <= 3.5.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fields
Alta
CVE-2025-12166
Simply Schedule Appointments <= 1.6.9.9 - Unauthenticated SQL Injection via `order` and `append_where_sql` Parameters
Media
CVE-2026-24603
Universal Google Adsense and Ads manager <= 1.1.8 - Missing Authorization
Media
CVE-2026-24604
Simple GDPR Cookie Compliance <= 2.0.0 - Missing Authorization
Media
CVE-2026-24605
X Addons for Elementor <= 1.0.23 - Missing Authorization
Alta
CVE-2026-40721
Element Pack Pro <= 9.0.6 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2026-24601
Penci Pay Writer <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-24999
Alma <= 5.16.1 - Missing Authorization
Media
CVE-2026-24600
Penci Review <= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2026-23550
Modular DS <= 2.5.1 - Unauthenticated Privilege Escalation
Media
CVE-2025-10915
Dreamer Blog <= 1.2 - Missing Authorization
Media
CVE-2026-24606
Bayarcash WooCommerce <= 4.3.12 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.