Media
CVE-2025-62760
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 146
Restablecer filtros
Media
CVE-2025-69014
Youzify <= 1.3.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Media
CVE-2025-14154
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.10.2 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2025-67582
Wbcom Designs <= 2.1.1 - Missing Authorization
Baja
CVE-2025-9218
rtMedia for WordPress, BuddyPress and bbPress 4.7.0 - 4.7.3 - Missing Authorization to Unauthenticated Information Disclosure via handle_rest_pre_dispatch Function
Media
CVE-2025-14064
BuddyTask <= 1.3.0 - Missing Authorization to Authenticated (Subscriber+) Cross-Group Task Board Access and Manipulation
Media
CVE-2025-12391
Restrictions for BuddyPress <= 1.5.2 - Missing Authorization to Unauthenticated Tracking Status Update
Alta
CVE-2025-64207
Jannah <= 7.6.0 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2025-64206
Jannah <= 7.6.0 - Unauthenticated PHP Object Injection
Alta
CVE-2025-64205
Jannah <= 7.6.0 - Unauthenticated Local File Inclusion
Media
CVE-2025-62949
Activity Plus Reloaded for BuddyPress <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-62022
BuddyPress <= 14.3.4 - Missing Authorization
Media
CVE-2025-58263
BuddyPress Notification Widget <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-53334
Jannah < 7.5.1 - Unauthenticated Local File Inclusion
Crítica
CVE-2025-48158
BuddyPress XProfile Custom Image Field <= 3.0.1 - Unauthenticated Arbitrary File Deletion
Media
CVE-2025-50028
Ultimate Push Notifications <= 1.3.0 - Missing Authorization
Alta
CVE-2025-26592
Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 - Unauthenticated Local File Inclusion
Media
CVE-2025-5526
BuddyPress Docs <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Document Read/Update
Media
CVE-2025-30957
Activity Plus Reloaded for BuddyPress <= 1.1.2 - Missing Authorization
Alta
CVE-2025-47548
Wbcom Designs - Activity Link Preview For BuddyPress <= 1.4.4 - Unauthenticated Server-Side Request Forgery
Media
CVE-2025-39367
KLEO < 5.4.4 - Missing Authorization
Media
CVE-2025-3793
Buddypress Force Password Change <= 0.1 - Authenticated (Subscriber+) Account Takeover via Password Update
Media
CVE-2025-31006
Activity Reactions For Buddypress <= 1.0.22 - Reflected Cross-Site Scripting
Alta
CVE-2025-31033
Buddypress Humanity <= 1.2 - Cross-Site Request Forgery to Privilege Escalation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.