Crítica
CVE-2025-4322
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.741
Media
CVE-2025-47948
Cocotais Bot has builtin .echo command injection
Baja
CVE-2025-47931
LibreNMS stored Cross-site Scripting vulnerability in poller group name
Media
CVE-2025-26621
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.5.2, any user with the capability manage customizations can edit webhook that wi
Alta
CVE-2025-2099
A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) a
Media
CVE-2025-48234
Ultimate Blocks <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-48246
The Events Calendar <= 6.11.2.1 - Missing Authorization
Media
CVE-2025-48282
Majestic Support <= 1.1.0 - Missing Authorization
Media
CVE-2025-48277
Cost Calculator Builder <= 3.2.74 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-48263
MultiVendorX <= 4.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2025-32292
Jarvis – Night Club, Concert, Festival WordPress <= 1.8.11 - Unauthenticated PHP Object Injection
Media
CVE-2025-48344
Rootspersona <= 3.7.5 - Cross-Site Request Forgery
Media
CVE-2025-48265
Year Make Model Search for WooCommerce <= 1.0.11 - Cross-Site Request Forgery
Media
CVE-2025-48276
Visual Composer Website Builder <= 45.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2025-39489
CouponXL <= 4.5.0 - Unauthenticated Privilege Escalation
Media
CVE-2025-39368
Rootspersona <= 3.7.5 - Missing Authorization
Media
CVE-2024-5878
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Library
Media
CVE-2025-48239
Product Notes Tab & Private Admin Notes for WooCommerce <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-48269
WPAdverts <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-48253
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-48240
Cost of Goods for WooCommerce <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-48256
Import Social Events <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-31054
Bloggie <= 2.0.8 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2025-48238
AWcode Toolkit <= 1.0.18 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.