Alta
CVE-2025-28980
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.741
Crítica
CVE-2025-49414
FW Gallery <= 8.0.0 - Unauthenticated Arbitrary File Upload
Crítica
CVE-2025-30933
LogisticsHub <= 1.1.6 - Unauthenticated Arbitrary File Upload
Media
CVE-2025-28976
Email Address Security by WebEmailProtector <= 3.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Alta
CVE-2025-52833
LMS <= 9.2 - Unauthenticated SQL Injection
Media
CVE-2025-52813
MobiLoud <= 4.6.6 - Missing Authorization
Media
CVE-2025-54045
CM On Demand Search And Replace <= 1.5.4 - Missing Authorization
Media
CVE-2025-48231
Booking Calendar Contact Form <= 1.2.58 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2025-53393
akka-cluster-metrics uses Java serialization for cluster metrics
Media
CVE-2025-62886
Pricing Table builder <= 1.5.1 - Cross-Site Request Forgery
Baja
CVE-2025-32897
Apache Seata Vulnerable to Deserialization of Untrusted Data
Media
CVE-2025-6462
EZ SQL Reports Shortcode Widget and DB Backup <= 5.25.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via SQLREPORT Shortcode
Baja
ghsa-vh5j-5fhq-9xwg
Taylor has race condition in /get-patch that allows purchase token replay
Alta
CVE-2025-53093
TabberNeue vulnerable to Stored XSS through wikitext
Media
CVE-2025-5937
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet <= 3.2.0 - Cross-Site Request Forgery to Settings Reset
Alta
CVE-2025-6755
Game Users Share Buttons <= 1.3.0 - Authenticated (Subscriber+) Arbitrary File Deletion via themeNameId Parameter
Crítica
CVE-2025-5304
PT Project Notebooks 1.0.0 - 1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via wpnb_pto_new_users_add Function
Media
CVE-2025-6252
Qi Addons For Elementor <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-44163
raspap-webgui has a Directory Traversal vulnerability
Alta
CVE-2025-52999
jackson-core can throw a StackoverflowError when processing deeply nested data
Media
CVE-2025-6350
WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-6379
BeeTeam368 Extensions Pro <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Deletion
Alta
CVE-2025-6381
BeeTeam368 Extensions <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Deletion
Media
CVE-2025-49592
n8n allows open redirects via the /signin endpoint
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.