Media
CVE-2025-12502
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtros
Media
CVE-2025-12521
Analytify Pro <= 7.0.3 - Unauthenticated Information Exposure
Media
CVE-2025-11881
AppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure
Media
CVE-2015-10147
Easy Testimonial Slider and Form <= 1.0.2 - Authenticated (Admin+) SQL injection
Media
CVE-2015-10146
Thumbnail Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection
Alta
CVE-2025-11735
HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter
Media
CVE-2025-63071
Shortcodes and extra features for Phlox <= 2.17.13 - Unauthenticated Information Exposure
Alta
CVE-2025-9322
Stripe Payment Forms <= 8.3.1 - Unauthenticated SQL Injection
Media
CVE-2025-11893
Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.8.4 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2025-11760
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.5.6 - Unauthenticated Sensitive Information Exposure
Alta
CVE-2025-8416
Product Filter by WBW <= 2.9.7 - Unauthenticated SQL Injection
Alta
CVE-2025-4203
wpForo Forum <= 2.4.8 - Unauthenticated SQL Injection via get_members Function
Media
CVE-2025-10748
RapidResult <= 1.2 - Authenticated (Contributor+) SQL Injection
Media
CVE-2025-64366
MasterStudy LMS <= 3.6.27 - Authenticated (Instructor+) SQL Injection
Media
CVE-2025-10638
NS Maintenance Mode for WP <= 1.3.1 - Unauthenticated Information Exposure
Media
CVE-2025-6833
All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Clocking In/Out
Media
CVE-2025-10047
Email Tracker <= 5.3.15 - Authenticated (Admin+) SQL Injection
Media
CVE-2025-62979
ACF to REST API <= 3.3.4 - Unauthenticated Information Exposure
Media
CVE-2025-10750
PowerBI Embed Reports <= 1.2.0 - Unauthenticated Sensitive Information Disclosure
Media
CVE-2025-11741
WPC Smart Quick View for WooCommerce <= 4.2.5 - Insecure Direct Object Reference to Unauthenticated Private Product Exposure
Alta
CVE-2025-11691
PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Inyección SQL no autenticada
Una vulnerabilidad de inyección SQL no autenticada en PPOM para WooCommerce permite extraer información confidencial de la base de datos si Legacy Price Calculations está habilitado.
Media
CVE-2025-10187
GSpeech TTS – WordPress Text To Speech Plugin <= 3.17.13 - Authenticated (Admin+) SQL injection
Media
CVE-2025-62062
Easy Post Submission <= 1.7.0 - Unauthenticated Sensitive Information Exposure
Media
CVE-2025-59575
MasterStudy LMS <= 3.6.20 - Authenticated (Instructor+) Sensitive Information Exposure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.