Media
CVE-2019-25222
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.646
Crítica
CVE-2025-1771
Traveler <= 3.1.8 - Unauthenticated Local File Inclusion via hotel_alone_load_more_post
Alta
CVE-2025-22526
PHP/MySQL CPU performance statistics <= 1.2.1 - Unauthenticated PHP Object Injection
Crítica
CVE-2024-54291
PluginPass <= 0.9.10 - Unauthenticated Arbitrary File Deletion
Alta
CVE-2025-2325
WP Test Email <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2025-2279
Maps – Google Maps <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-1773
Traveler <= 3.1.8 - Reflected Cross-Site Scripting
Crítica
CVE-2025-71333
Flowise Pre-auth Arbitrary File Upload
Crítica
CVE-2025-2232
Realteo - Real Estate Plugin by Purethemes <= 1.2.8 - Authentication Bypass via 'do_register_user'
Baja
CVE-2025-27496
Snowflake JDBC Driver client-side encryption key in DEBUG logs
Baja
CVE-2025-28010
MODX allows cross-site scripting (XSS) via an SVG file
Media
CVE-2025-2289
Zegen - Church WordPress Theme <= 1.1.9 - Missing Authorization to Authenticated (Subscriber+) Theme Options Updates
Alta
CVE-2025-2056
WP Ghost <= 5.4.01 - Unauthenticated Limited File Read
Media
CVE-2025-1528
Search and filter pro <= 2.5.19 - Missing Authorization to Authenticated (Subscriber+) Post Meta Exposure
Media
CVE-2020-36843
Ed25519 Signature Malleability in ed25519-java Due to Missing Scalar Range Check
Media
CVE-2024-13407
Omnipress <= 1.5.4 - Authenticated (Contributor+) Post Disclosure
Alta
CVE-2024-13321
AnalyticsWP <= 2.0.0 - Unauthenticated SQL Injection
Alta
CVE-2024-13913
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.83 - Cross-Site Request Forgery to Local File Inclusion
Media
CVE-2025-0955
VidoRev Extensions <= 2.9.9.9.9.9.5 - Missing Authorization to Unauthenticated Youtube Video Import
Alta
CVE-2025-2103
SoundRise Music <= 1.7 - Authenticated (Subscriber+) Arbitrary Options Update
Alta
CVE-2024-13773
Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposure
Alta
CVE-2024-13376
Industrial <= 1.7.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Media
CVE-2025-2055
MapPress Maps for WordPress <= 2.94.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-26941
Church Admin <= 5.0.18 - Unauthenticated SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.