Media
CVE-2025-68601
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Media
CVE-2025-68607
Custom Field Template <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-27368
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.19.8 - Missing Authorization
Alta
CVE-2025-68506
Docket Cache <= 24.07.03 - Unauthenticated Local File Inclusion
Alta
CVE-2025-68562
MapSVG <= 8.7.3 - Authenticated (Contributor+) Arbitrary File Upload
Media
CVE-2025-68586
Cooked <= 1.11.3 - Missing Authorization
Crítica
CVE-2025-13773
Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution
Media
CVE-2025-68595
Widgets for Social Photo Feed <= 1.7.8 - Missing Authorization
Alta
CVE-2025-68546
Nika <= 1.2.14 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2025-68544
Diza <= 1.3.15 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2025-67467
GiveWP <= 4.13.1 - Cross-Site Request Forgery
Media
CVE-2025-68551
VPSUForm <= 3.2.24 - Authenticated (Contributor+) Information Exposure
Media
CVE-2025-68508
Brave <= 0.8.3 - Missing Authorization
Media
CVE-2026-22342
Dating <= 11.2.0 - Cross-Site Request Forgery
Media
CVE-2025-68556
HAPPY <= 1.0.9 - Missing Authorization
Media
CVE-2025-68994
Product Loops for WooCommerce <= 2.1.2 - Missing Authorization
Crítica
CVE-2025-14829
e-xact-hosted-payment <= 2.0 - Unauthenticated Arbitrary File Deletion
Media
CVE-2025-68548
Responsive Posts Carousel Pro <= 15.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-68550
WPBulky <= 1.1.13 - Authenticated (Author+) SQL Injection
Media
CVE-2025-68557
Chakra test <= 1.0.1 - Missing Authorization
Media
CVE-2025-68993
Share, Print and PDF Products for WooCommerce <= 3.1.2 - Missing Authorization
Media
CVE-2025-14635
Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
Crítica
CVE-2025-14388
PhastPress <= 3.7 - Unauthenticated Arbitrary File Read via Null Byte Injection
Media
CVE-2025-68991
BWL Pro Voting Manager <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.