Alta
CVE-2024-11283
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.646
Media
CVE-2024-13772
Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.6.1 - Authentication Bypass
Alta
CVE-2025-0952
Eco Nature - Environment & Ecology WordPress Theme <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Crítica
CVE-2024-13824
CiyaShop - Multipurpose WooCommerce Theme <= 4.19.0 - Unauthenticated PHP Object Injection
Alta
CVE-2025-1764
LoginPress <= 3.3.1 - Cross-Site Request Forgery to Arbitrary Options Update
Crítica
CVE-2024-11286
WP JobHunt <= 7.1 - Authentication Bypass
Alta
CVE-2025-2221
WPCOM Member <= 1.7.6 - Unauthenticated Time-Based SQL Injection
Media
CVE-2025-2166
CM FAQ – Simplify support with an intuitive FAQ management tool <= 1.2.5 - Reflected Cross-Site Scripting
Crítica
CVE-2024-11284
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover
Media
CVE-2025-1526
DethemeKit for Elementor <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2024-13771
Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Authentication Bypass via Password Update
Media
CVE-2025-1285
Resido - Real Estate WordPress Theme <= 3.6 - Missing Authorization to Unauthenticated Server-Side Request Forgery and API Key Settings Update
Media
CVE-2025-1507
ShareThis Dashboard for Google Analytics <= 3.2.1 - Missing Authorization to Unauthenticated Feature Deactivation
Alta
CVE-2024-12810
JobCareer | Job Board Responsive WordPress Theme <= 7.1 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrative Actions
Crítica
CVE-2024-11285
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Email Update/Account Takeover
Media
CVE-2025-27794
Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite
Alta
CVE-2025-25975
Prototype Pollution Vulnerability in parse-git-config
Media
CVE-2025-27017
Apache NiFi: Potential Insertion of MongoDB Password in Provenance Record
Media
CVE-2025-27867
Apache Felix HTTP Webconsole Plugin: XSS in HTTP Webconsole Plugin
Media
ghsa-3wgq-h4fr-cwg5
laravel-crud-wizard-free has File Validation Bypass
Alta
CVE-2025-2240
SmallRye Fault Tolerance out-of-memory (OOM) issue
Media
CVE-2025-29891
Apache Camel Message Header Injection through request parameters
Media
CVE-2025-1559
CC-IMG-Shortcode <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-13703
CRM and Lead Management by vcita <= 2.7.5 - Missing Authorization to Authenticated (Susbcriber+) Widget Toggle
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.