Media
CVE-2025-30613
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Media
CVE-2025-30791
Cart tracking for WooCommerce <= 1.0.16 - Authenticated (Administrator+) SQL Injection
Media
CVE-2025-30826
IP Locator <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-30862
reCAPTCHA for all <= 2.22 - Cross-Site Request Forgery
Crítica
CVE-2025-30878
JS Help Desk <= 2.9.2 - Unauthenticated Arbitrary File Deletion
Media
CVE-2025-30827
WP2LEADS <= 3.4.5 - Reflected Cross-Site Scripting
Media
CVE-2025-30766
Happy Addons for Elementor <= 3.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-30882
JS Help Desk <= 2.9.1 - Unauthenticated Arbitrary File Download
Media
CVE-2025-30848
Hostel <= 1.1.5 - Reflected Cross-Site Scripting
Media
CVE-2025-30544
OK Poster Group <= 1.1 - Reflected Cross-Site Scripting
Media
CVE-2025-30802
Our Team Members <= 2.2 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
Media
CVE-2025-30786
Quotes llama <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-30788
EZ SQL Reports Shortcode Widget and DB Backup <= 5.25.08 - Cross-Site Request Forgery
Media
CVE-2025-30822
Custom Login Logo <= 1.1.7 - Cross-Site Request Forgery
Media
CVE-2025-30839
Taxi Booking Manager for WooCommerce <= 1.2.1 - Missing Authorization
Media
CVE-2025-30857
Currency Switcher for WooCommerce <= 0.0.7 - Cross-Site Request Forgery
Media
CVE-2025-30819
Simple Giveaways <= 2.48.1 - Authenticated (Contributor+) SQL Injection
Media
CVE-2025-30792
Comment Approved Notifier Extended <= 5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-30904
Chartify <= 3.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-30803
Just Writing Statistics <= 5.3 - Missing Authorization
Alta
CVE-2025-30781
Scheduled & Automatic Order Status Controller for WooCommerce <= 3.7.1 - Open Redirect
Media
CVE-2025-30789
Clearout Email Validator <= 3.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-30821
SNORDIAN's H5PxAPIkatchu <= 0.4.14 - Missing Authorization
Crítica
CVE-2025-30618
Rapyd Payment Extension for WooCommerce <= 1.2.0 - Unauthenticated PHP Object Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.