Alta
CVE-2025-30795
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2025-30909
Conversios.io <= 7.2.3 - Missing Authorization
Media
CVE-2025-30801
TWB Woocommerce Reviews <= 1.7.7 - Cross-Site Request Forgery
Media
CVE-2025-30899
User Registration <= 4.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-30926
King Addons for Elementor <= 24.12.58 - Missing Authorization
Media
CVE-2025-22739
LearnPress <= 4.2.7.5 - Missing Authorization
Media
CVE-2025-30860
Off-Canvas Sidebars & Menus (Slidebars) <= 0.5.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-30814
The Post Grid <= 7.7.17 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2025-30613
Nmedia MailChimp <= 5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2025-30791
Cart tracking for WooCommerce <= 1.0.16 - Authenticated (Administrator+) SQL Injection
Media
CVE-2025-30826
IP Locator <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-30862
reCAPTCHA for all <= 2.22 - Cross-Site Request Forgery
Crítica
CVE-2025-30878
JS Help Desk <= 2.9.2 - Unauthenticated Arbitrary File Deletion
Media
CVE-2025-30827
WP2LEADS <= 3.4.5 - Reflected Cross-Site Scripting
Media
CVE-2025-30766
Happy Addons for Elementor <= 3.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-30882
JS Help Desk <= 2.9.1 - Unauthenticated Arbitrary File Download
Media
CVE-2025-30848
Hostel <= 1.1.5 - Reflected Cross-Site Scripting
Media
CVE-2025-30544
OK Poster Group <= 1.1 - Reflected Cross-Site Scripting
Media
CVE-2025-30802
Our Team Members <= 2.2 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
Media
CVE-2025-30786
Quotes llama <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-30788
EZ SQL Reports Shortcode Widget and DB Backup <= 5.25.08 - Cross-Site Request Forgery
Media
CVE-2025-30822
Custom Login Logo <= 1.1.7 - Cross-Site Request Forgery
Media
CVE-2025-30839
Taxi Booking Manager for WooCommerce <= 1.2.1 - Missing Authorization
Media
CVE-2025-30857
Currency Switcher for WooCommerce <= 0.0.7 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.