Media
CVE-2025-3284
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71
Restablecer filtros
Media
CVE-2025-3292
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password Update
Media
CVE-2025-3282
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membership Modification
Media
CVE-2025-32655
Restrict User Registration <= 1.0.1 Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-32679
User Registration Using Contact Form 7 <= 2.4 - Cross-Site Request Forgery
Alta
CVE-2025-2594
User Registration & Membership <= 4.1.2 - Authentication Bypass
Media
CVE-2025-30899
User Registration <= 4.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Crítica
CVE-2025-2563
User Registration & Membership <= 4.1.1 - Unauthenticated Privilege Escalation
Media
CVE-2025-1511
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site Scripting
Alta
CVE-2023-52209
WPForms User Registration <= 2.1.0 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation
Alta
CVE-2024-4958
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.2.0.1 - Missing Authorization to Privilege Escalation
Alta
CVE-2024-2417
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Media
CVE-2024-3295
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Unauthenticated Media Deletion
Media
CVE-2024-1720
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.4 - Unauthenticated Stored Self-Based Cross-Site Scripting
Media
CVE-2023-5228
User Registration – Custom Registration Form, Login Form And User Profile For WordPress <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2023-41954
ProfilePress <= 4.13.1 - Limited Privilege Escalation via 'acceptable_defined_roles'
Crítica
CVE-2023-3342
User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
Alta
CVE-2023-3343
User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection
Media
CVE-2023-29429
User Registration <= 2.3.2.1 - Missing Authorization via send_test_email
Alta
CVE-2023-27459
User Registration <= 2.3.2.1 - PHP Object Injection
Media
CVE-2023-23987
User Registration <= 2.3.0 - Authenticated (Administrator+) Stored Cross Site Scripting
Alta
CVE-2022-3912
User Registration <= 2.2.4 - Authenticated (Subscriber+) Arbitrary File Upload
Media
761a4801-fc4a-40a0-b5aa-303d88a87062
User Registration <= 1.5.5 - Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.