Alta
CVE-2025-7640
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Media
CVE-2025-7780
AI Engine <= 2.9.4 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions
Crítica
CVE-2025-7437
Ebook Store <= 5.8012 - Unauthenticated Arbitrary File Upload
Crítica
CVE-2025-7852
WPBookit <= 1.0.6 - Unauthenticated Arbitrary File Upload via image_upload_handle Function
Crítica
CVE-2025-6715
LatePoint <= 5.1.93 - Unauthenticated Local File Inclusion
Alta
CVE-2025-48171
Cena Store <= 2.11.26 - Unauthenticated Local File Inclusion
Media
CVE-2025-8009
Security Ninja – Secure Firewall & Secure Malware Scanner - 5.201 - 5.242 - Authenticated (Administrator+) Arbitrary File Read
Alta
CVE-2025-25172
VidMov <= 1.9.4 - Unauthenticated Local File Inclusion
Media
CVE-2025-5818
Featured Image Plus – Quick & Bulk Edit with Unsplash <= 1.6.6 - Authenticated (Admin+) Server-Side Request Forgery
Alta
CVE-2025-53213
ReachShip WooCommerce Multi-Carrier & Conditional Shipping <= 4.3.1 - Authenticated (Contributor+) Arbitrary File Upload
Alta
CVE-2025-3703
CSS & JavaScript Toolbox < 12.0.3 - Authenticated (Subscriber+) Local File Inclusion
Alta
CVE-2025-60198
Saxon - Viral Content Blog & Magazine Marketing WordPress <= 1.9.3 - Unauthenticated Local File Inclusion
Alta
CVE-2025-60197
Simple Contact Forms <= 1.6.4 - Unauthenticated Local File Inclusion
Alta
CVE-2025-54031
Support Board <= 3.8.0 - Unauthenticated Local File Inclusion
Alta
CVE-2025-48160
Caliris <= 1.5 - Unauthenticated Local File Inclusion
Alta
CVE-2025-28979
WP Pipes <= 1.4.3 - Unauthenticated Local File Inclusion
Alta
CVE-2025-60199
InHype - Blog & Magazine WordPress <= 1.5.2 - Unauthenticated Local File Inclusion
Alta
CVE-2025-6213
Nginx Cache Purge Preload <= 2.1.1 - Authenticated (Administrator+) Remote Code Execution
Alta
CVE-2025-60202
Favorites <= 2.3.6 - Unauthenticated Local File Inclusion
Alta
CVE-2025-7645
Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.2.8 - Unauthenticated Arbitrary File Deletion Triggered via Admin Form Submission Deletion
Alta
CVE-2025-60200
LearnPress Export Import <= 4.1.2 - Unauthenticated Local File Inclusion
Alta
CVE-2025-60201
Customer Area < 8.3.4 - Unauthenticated Local File Inclusion
Crítica
CVE-2025-7643
Attachment Manager <= 2.1.2 - Unauthenticated Arbitrary File Deletion
Alta
CVE-2025-3740
School Management System for Wordpress <= 93.1.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.