Alta
CVE-2025-6437
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.741
Alta
CVE-2025-6459
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Cross-Site Request Forgery to PHP Code Injection in bsaCreateAdTemplate
Alta
CVE-2025-4381
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection
Crítica
CVE-2025-4689
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Execution
Alta
CVE-2025-4380
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion
Media
CVE-2026-15289
Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'
Media
CVE-2024-11405
WP Front-end login and register <= 2.1.0 - Reflected Cross-Site Scripting
Crítica
CVE-2025-5746
Drag and Drop Multiple File Upload (Pro) - WooCommerce <= 1.7.1 and 5.0 - 5.0.5 - Unauthenticated Arbitrary File Upload
Alta
CVE-2025-53198
Houzez <= 4.0.4 - Unauthenticated Local File Inclusion
Media
CVE-2025-52727
CSS3 Vertical Web Pricing Tables <= 1.9 - Reflected Cross-Site Scripting
Alta
CVE-2025-52832
NGG Smart Image Search <= 3.4.1 - Unauthenticated SQL Injection
Alta
CVE-2025-52717
LifterLMS <= 8.0.6 - Unauthenticated SQL Injection
Alta
CVE-2025-53204
Event List <= 1.9.2 - Unauthenticated Local File Inclusion
Alta
CVE-2025-52805
Leyka <= 3.31.9 - Unauthenticated Local File Inclusion
Alta
CVE-2025-52722
Classiera <= 4.0.34 - Unauthenticated SQL Injection
Alta
CVE-2025-49417
WooCommerce Product Multi-Action <= 1.3 - Unauthenticated PHP Object Injection
Alta
CVE-2025-5804
Case Theme User < 1.0.4 - Unauthenticated Local File Inclusion
Alta
CVE-2025-53207
WP Travel Gutenberg Blocks <= 3.9.0 - Unauthenticated Local File Inclusion
Crítica
CVE-2025-52726
CouponXxL Custom Post Types <= 3.0 - Unauthenticated Privilege Escalation
Crítica
CVE-2025-28983
Click & Pledge Connect <= 25.04010101-WP6.8 - Unauthenticated SQL Injection to Privilege Escalation
Alta
CVE-2025-52723
Networker <= 1.2.0 - Unauthenticated Local File Inclusion
Crítica
CVE-2025-52725
CouponXxL <= 3.0.0 - Unauthenticated PHP Object Injection
Crítica
CVE-2025-53209
Masteriyo LMS PRO <= 2.20.0 - Unauthenticated Privilege Escalation
Alta
CVE-2025-52807
Kossy - Minimalist eCommerce WordPress Theme <= 1.45 - Unauthenticated Local File Inclusion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.