Media
CVE-2025-6387
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.741
Media
CVE-2025-7966
Get Youtube Subs <= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via subscribe_link_att Function
Media
CVE-2025-7959
Station Pro <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via width and height Parameters
Media
CVE-2025-7822
WP Wallcreeper <= 1.6.1 - Missing Authorization to Authenticated (Susbcriber+) Cache Enable/Disable
Media
CVE-2025-5084
Post Grid Master <= 3.4.13 - Reflected Cross-Site Scripting via argsArray['read_more_text']
Media
CVE-2025-6539
Voltax Video Player <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Media
CVE-2025-8071
Mine CloudVod <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via audio Parameter
Media
CVE-2025-4608
Structured Content <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode
Media
CVE-2025-7780
AI Engine <= 2.9.4 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions
Alta
CVE-2025-7695
Dataverse Integration 2.77 - 2.81 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via reset_password_link REST Route
Alta
CVE-2025-53015
ImageMagick has XMP profile write that triggers hang due to unbounded loop
Media
CVE-2025-50481
A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a
Sin evaluar
CVE-2025-8092
drupal/cookies - SA-CONTRIB-2025-092
Crítica
CVE-2025-7437
Ebook Store <= 5.8012 - Unauthenticated Arbitrary File Upload
Crítica
CVE-2025-7852
WPBookit <= 1.0.6 - Unauthenticated Arbitrary File Upload via image_upload_handle Function
Alta
CVE-2025-8021
files-bucket-server vulnerable to Directory Traversal
Alta
CVE-2025-8020
private-ip vulnerable to Server-Side Request Forgery
Alta
CVE-2025-8022
bun vulnerable to OS Command Injection
Media
CVE-2025-52734
CropRefine <= 1.2.1 - Reflected Cross-Site Scripting
Media
CVE-2025-50053
Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Reflected Cross-Site Scripting
Crítica
CVE-2025-6715
LatePoint <= 5.1.93 - Unauthenticated Local File Inclusion
Alta
CVE-2025-48171
Cena Store <= 2.11.26 - Unauthenticated Local File Inclusion
Media
CVE-2025-53201
Jobmonster <= 4.7.8 - Reflected Cross-Site Scripting
Media
CVE-2025-53559
Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.