Media
CVE-2025-12191
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Media
CVE-2025-12128
Hide Categories Or Products On Shop Page <= 1.0.7 - Cross-Site Request Forgery to Settings Update
Media
CVE-2025-13006
SurveyFunnel – Survey Plugin for WordPress <= 1.1.5 - Unauthenticated Information Exposure
Media
CVE-2025-12417
SurveyFunnel – Survey Plugin for WordPress <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2025-13494
SSP Debug <= 1.0.0 - Unauthenticated Sensitive Information Exposure
Crítica
CVE-2025-13313
CRM Memberships <= 2.6 - Missing Authorization to Privilege Escalation via Unauthenticated Password Reset in 'ntzcrm_changepassword' AJAX Endpoint
Media
CVE-2025-13312
CRM Memberships <= 2.6 - Missing Authorization to Unauthenticated 'ntzcrm_add_new_tag' AJAX Action
Media
CVE-2025-13362
Norby AI <= 1.0.3 - Cross-Site Request Forgery to Settings Update
Alta
CVE-2025-13066
Demo Importer Plus <= 2.0.6 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass
Media
CVE-2025-11759
Backup, Restore and Migrate your sites with XCloner <= 4.8.2 - Cross-Site Request Forgery in Xcloner_Remote_Storage:save()
Media
CVE-2025-12804
Booking Calendar <= 10.14.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingcalendar Shortcode
Alta
CVE-2025-13543
PostGallery <= 1.12.5 - Authenticated (Subscriber+) Arbitrary File Upload
Media
CVE-2025-63009
Google Analytics Events <= 2.8.2 - Unauthenticated Information Exposure
Media
CVE-2025-63077
Happy Addons for Elementor <= 3.20.3 - Missing Authorization
Media
CVE-2025-62733
Custom Sidebars by ProteusThemes <= 1.0.3 - Cross-Site Request Forgery
Media
CVE-2025-62736
Image Cleanup <= 1.9.2 - Missing Authorization
Media
CVE-2025-67570
WPForms Google Sheet Connector <= 4.0.0 - Missing Authorization
Media
CVE-2025-67569
AdForest <= 6.0.11 - Missing Authorization
Media
CVE-2025-62735
User Spam Remover <= 1.1 - Unauthenticated Information Exposure
Media
CVE-2025-68494
Premium Addons for Elementor <= 4.11.53 - Unauthenticated Information Exposure
Media
CVE-2025-62762
SMTP Mail <= 1.3.49 - Cross-Site Request Forgery
Media
CVE-2025-63008
ERP <= 1.16.7 - Missing Authorization
Media
CVE-2025-62737
Image Cleanup <= 1.9.2 - Unauthenticated Information Exposure
Media
CVE-2025-49348
Hype <= 1.0.5 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.