Baja
CVE-2025-14550
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Baja
CVE-2025-13473
Django has Observable Timing Discrepancy
Alta
CVE-2025-67853
Moodle Affected by Improper Restriction of Excessive Authentication Attempts
Media
CVE-2025-67856
Moodle has an authorization logic flaw
Media
CVE-2025-67855
Moodle vulnerable to Cross-site Scripting
Media
CVE-2025-67857
Moodle Inserts Sensitive Information Into Sent Data
Baja
CVE-2025-67852
Moodle Open Redirect vulnerability
Alta
CVE-2025-67848
Moodle authentication bypass vulnerability
Alta
CVE-2025-67849
Moodle Cross-site Scripting (XSS) vulnerability
Alta
CVE-2025-67850
Moodle vulnerable to Cross-site Scripting
Media
CVE-2025-67851
Moodle formula injection vulnerability
Media
CVE-2026-1755
Menu Icons by ThemeIsle <= 0.13.20 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2025-70960
A stored cross-site scripting (XSS) vulnerability in the Forums module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.
Media
CVE-2025-70959
A stored cross-site scripting (XSS) vulnerability in the Jobs module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.
Media
CVE-2025-70958
Subrion CMS vulnerable to cross-site scripting
Alta
CVE-2025-69372
SevenHills <= 1.6.2 - Unauthenticated PHP Object Injection
Media
CVE-2026-24941
WP Job Portal <= 2.4.4 - Missing Authorization
Alta
CVE-2025-15386
Responsive Lightbox & Gallery < 2.6.1 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-24943
Grand Conference <= 5.3.4 - Reflected Cross-Site Scripting
Media
CVE-2026-39605
Super Custom Login <= 1.1 - Missing Authorization
Media
CVE-2026-24946
Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Missing Authorization
Alta
CVE-2026-24949
PhotoMe <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2025-67624
Optimize More! – Images <= 1.1.3 - Missing Authorization
Media
CVE-2026-24950
Authorsy <= 1.0.6 - Unauthenticated Insecure Direct Object Reference
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.