Media
CVE-2025-39446
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Alta
CVE-2025-39436
I Draw <= 1.0 - Authenticated (Author+) Arbitrary File Upload
Crítica
CVE-2025-39596
Quentn WP <= 1.2.8 - Unauthenticated Privilege Escalation
Crítica
CVE-2025-39466
Dør <= 2.4 - Unauthenticated Local File Inclusion
Media
CVE-2025-39454
Name Directory <= 1.30.0 - Missing Authorization
Media
CVE-2025-39465
Advanced Google Maps <= 5.8.4 - Missing Authorization
Media
CVE-2025-39404
Sassy Social Share <= 3.3.73 - Open Redirect
Media
CVE-2025-39435
My Marginalia <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-39407
Memberpress < 1.12.0 - Reflected Cross-Site Scripting
Media
CVE-2025-39447
JetElements For Elementor <= 2.7.4.1 - Missing Authorization
Media
CVE-2025-39438
Theme Changer <= 1.4 - Cross-Site Request Forgery
Media
CVE-2025-39417
Redirect wordpress to welcome or landing page <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-39426
illow – Cookies Consent <= 0.2.0 - Cross-Site Request Forgery
Crítica
CVE-2025-39550
FluentCommunity <= 1.2.15 - Unauthenticated PHP Object Injection
Media
CVE-2025-39423
Add to Header <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-39567
Web Directory Free <= 1.7.8 - Reflected Cross-Site Scripting
Media
CVE-2025-39421
WP Sticky Side Buttons <= 2.1 - Cross-Site Request Forgery
Media
CVE-2025-39442
Review Wave – Google Places Reviews <= 1.4.7 - Cross-Site Request Forgery
Media
CVE-2025-39418
RSS Manager <= 0.06 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-39460
Eduma <= 5.6.4 - Missing Authorization
Media
CVE-2025-39594
Arigato Autoresponder and Newsletter <= 2.7.2.4 - Reflected Cross-Site Scripting
Media
CVE-2025-39580
Dashi <= 3.1.8 - Missing Authorization
Alta
CVE-2025-39402
WPAMS <= 44.0 (17-08-2023) - Authenticated (Subscriber+) Arbitrary File Upload
Media
CVE-2025-39408
BruteGuard – Brute Force Login Protection <= 0.1.4 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.