Media
CVE-2025-68057
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Media
CVE-2025-69187
Final User <= 1.2.5 - Missing Authorization
Media
CVE-2026-24563
LifePress <= 2.2.1 - Missing Authorization
Media
CVE-2025-68072
Easy Property Listings <= 3.5.20 - Missing Authorization
Alta
CVE-2025-69292
Membership <= 1.6.4 - Authenticated (Subscriber+) Privilege Escalation
Media
CVE-2026-24560
Cloudinary <= 3.3.0 - Missing Authorization
Alta
CVE-2025-14866
Melapress Role Editor <= 1.1.1 - Improper Authorization to Authenticated (Subscriber+) Privilege Escalation via Secondary Role Assignment
Media
CVE-2026-24553
Fraud Prevention For Woocommerce <= 2.3.2 - Authenticated (Subscriber+) Information Exposure
Media
CVE-2025-13465
lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`
Alta
CVE-2026-0933
Wrangler affected by OS Command Injection in `wrangler pages deploy`
Baja
CVE-2026-24048
Backstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow`
Media
CVE-2026-24047
@backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass
Alta
CVE-2026-24046
Backstage has a Possible Symlink Path Traversal in Scaffolder Actions
Alta
CVE-2021-47853
phpPgAdmin contains a remote command execution vulnerability
Crítica
CVE-2026-0920
LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter
Alta
CVE-2026-23957
Seroval affected by Denial of Service via Array serialization
Alta
CVE-2026-23956
seroval affected by Denial of Service via RegExp serialization
Alta
ghsa-h3hw-29fv-2x75
@envelop/graphql-modules has a Race Condition vulnerability
Alta
CVE-2026-23965
sm-crypto Affected by Signature Forgery in SM2-DSA
Alta
CVE-2026-23967
sm-crypto Affected by Signature Malleability in SM2-DSA
Crítica
CVE-2026-23966
sm-crypto Affected by Private Key Recovery in SM2-PKE
Media
CVE-2026-23959
CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier
Media
CVE-2026-0895
mailqueue TYPO3 extension affected by Insecure Deserialization in QueueableFileTransport
Alta
CVE-2026-23737
seroval Affected by Remote Code Execution via JSON Deserialization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.