Alta
CVE-2025-68996
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Alta
CVE-2025-68870
CookieHint WP <= 1.0.0 - Unauthenticated Local File Inclusion
Media
CVE-2025-68600
Link Library <= 7.8.7 - Authenticated (Contributor+) Server-Side Request Forgery
Alta
CVE-2025-68563
Subscribe to Unlock Lite <= 1.3.0 - Authenticated (Subscriber+) Local File Inclusion
Alta
CVE-2025-68506
Docket Cache <= 24.07.03 - Unauthenticated Local File Inclusion
Alta
CVE-2025-68562
MapSVG <= 8.7.3 - Authenticated (Contributor+) Arbitrary File Upload
Crítica
CVE-2025-13773
Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution
Alta
CVE-2025-68546
Nika <= 1.2.14 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2025-68544
Diza <= 1.3.15 - Authenticated (Contributor+) Local File Inclusion
Crítica
CVE-2025-14829
e-xact-hosted-payment <= 2.0 - Unauthenticated Arbitrary File Deletion
Alta
CVE-2025-14800
Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_upload
Media
CVE-2025-67623
6Storage Rentals <= 2.20.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Alta
CVE-2025-68987
Cinerama - A WordPress Theme for Movie Studios and Filmmakers <= 2.4 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2025-68985
Aora <= 1.3.15 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2025-68983
Greenmart <= 4.2.11 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2025-68984
Puca <= 2.6.39 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2025-13624
Overstock Affiliate Links <= 1.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Crítica
CVE-2025-13329
File Uploader for WooCommerce <= 1.0.3 - Unauthenticated Arbitrary File Upload via add-image-data
Alta
CVE-2025-13999
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request Forgery
Media
CVE-2025-14277
Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Alta
CVE-2025-14804
Frontend File Manager <= 23.4 - Authenticated (Subscriber+) Arbitrary File Deletion
Alta
CVE-2025-13641
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.12 - Authenticated (Contributor+) Local File Inclusion via 'template'
Media
CVE-2025-12496
Zephyr Project Manager <= 3.3.203 - Authenticated (Custom+) Arbitrary File Read And Server-Side Request Forgery
Media
CVE-2025-13231
Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.