Media
CVE-2025-66116
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtros
Media
CVE-2025-68055
Hydra Booking <= 1.1.32 - Authenticated (Custom role+) SQL Injection
Media
CVE-2025-67546
ERP <= 1.16.6 - Authenticated (Subscriber+) Information Exposure
Media
CVE-2025-64295
All In One SEO Pack <= 4.8.6.1 - Authenticated (Subscriber+) Information Exposure
Media
CVE-2025-12584
Quick View for WooCommerce <= 2.2.17 - Unauthenticated Private Product Disclosure
Alta
CVE-2025-49919
eRoom <= 1.5.6 - Unauthenticated Information Exposure
Media
CVE-2025-12525
Locker Content <= 1.0.0 - Unauthenticated Information Exposure
Media
CVE-2025-13370
ProjectList <= 0.3.0 - Authenticated (Editor+) SQL Injection via 'id' Parameter
Media
CVE-2025-13385
Bookme <= 4.2 - Authenticated (Admin+) SQL Injection via 'filter[status]' Parameter
Media
CVE-2025-10144
Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection
Alta
CVE-2025-7402
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.95 - Unauthenticated SQL Injection via site_id
Media
CVE-2025-67517
ArtPlacer Widget <= 2.22.9.2 - Authenticated (Contributor+) SQL Injection
Media
CVE-2025-14314
PopupKit <= 2.1.5 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2025-12750
Groundhogg <= 4.2.6.1 - Authenticated (Admin+) SQL Injection
Alta
CVE-2025-13138
WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection via select_2_ajax() Function
Media
CVE-2025-11773
Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO <= 2.4.7 - Missing Authorization to Authenticated (Subscriber+) Contract Address Update
Media
CVE-2025-10938
UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Media
CVE-2025-12894
Import WP – Export and Import CSV and XML files to WordPress <= 2.14.17 - Unauthenticated Information Exposure
Media
CVE-2025-12747
Tainacan <= 1.0.0 - Unauthenticated Information Exposure
Media
CVE-2025-12778
Ultimate Member Widgets for Elementor <= 2.3 - Missing Authorization to Unauthenticated Information Exposure
Media
CVE-2025-13072
HandL UTM Grabber / Tracker <= 2.8.0 - Reflected Cross-Site Scripting
Media
CVE-2025-13073
HandL UTM Grabber / Tracker <= 2.8.0 - Reflected Cross-Site Scripting
Alta
CVE-2025-13035
Code Snippets <= 3.9.1 - Authenticated (Contributor+) PHP Code Injection via extract() and PHP Filter Chains
Alta
CVE-2026-15291
Chat Help – Click to Chat Button & Form <= 3.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.