Alta
CVE-2025-68864
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Alta
CVE-2025-69100
North <= 5.7.5 - Unauthenticated Local File Inclusion
Media
CVE-2026-25000
Wheel of Life <= 1.2.0 - Missing Authorization
Crítica
CVE-2025-69101
Workreap Core <= 3.4.0 - Authentication Bypass
Media
CVE-2025-68884
Simple Redirect <= 1.1 - Reflected Cross-Site Scripting
Media
CVE-2025-68007
Event Espresso 4 Decaf <= 5.0.37.decaf - Missing Authorization to Unauthenticated Settings Change
Media
CVE-2026-1003
GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools <= 4.3.0 - Missing Authorization to Authenticated (Author+) Arbitrary Post Deletion
Media
CVE-2025-68896
WDV One Page Docs <= 1.2.4 - Missing Authorization
Alta
CVE-2025-68034
CleverReach® WP <= 1.5.21 - Unauthenticated SQL Injection
Media
CVE-2026-25473
WZone <= 14.0.31 - Missing Authorization
Media
CVE-2026-24596
Related Posts Thumbnails Plugin for WordPress <= 4.3.2 - Cross-Site Request Forgery
Media
CVE-2026-22335
WooCommerce Frontend Manager – Ultimate < 6.7.7 - Authenticated (Subscriber+) SQL Injection
Crítica
CVE-2025-68015
Event Tickets with Ticket Scanner <= 2.8.5 - Unauthenticated Remote Code Execution
Media
CVE-2026-24599
NextMove Lite <= 2.23.0 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2025-68003
Shown Connector <= 1.2.10 - Missing Authorization to Unauthenticated Settings Update
Media
ghsa-595p-g7xc-c333
Algolia Search & Discovery for Magento 2 Has Untrusted Data Handling
Baja
CVE-2026-24001
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch
Alta
CVE-2026-23492
Pimcore Has an Incomplete Patch for CVE-2023-30848
Media
CVE-2026-22036
Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion
Media
CVE-2025-63644
pH7-Social-Dating-CMS affected by a stored cross-site scripting (XSS) vulnerability
Baja
CVE-2025-14457
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.2 - Missing Authorization to Unauthenticated File Deletion
Sin evaluar
CVE-2026-0948
drupal/social_auth_entra_id - SA-CONTRIB-2026-005
Sin evaluar
CVE-2026-0947
drupal/pianoanalytics - SA-CONTRIB-2026-004
Sin evaluar
CVE-2026-0946
drupal/atsmarttag - SA-CONTRIB-2026-003
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.