Media
CVE-2025-63042
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.638
Media
CVE-2025-66121
SiteGround Security <= 1.5.8 - Missing Authorization
Media
CVE-2025-67534
Rencontre <= 3.13.7 - Cross-Site Request Forgery
Crítica
CVE-2025-13615
StreamTube Core <= 4.78 - Unauthenticated Arbitrary User Password Change
Media
CVE-2025-64384
JetFormBuilder <= 3.5.3 - Missing Authorization
Media
CVE-2025-64639
Compress for MainWP <= 6.50.07 - Missing Authorization
Media
CVE-2025-62152
ConveyThis <= 269.2 - Missing Authorization
Media
CVE-2025-66108
TNC Toolbox: Web Performance <= 2.0.4 - Missing Authorization
Baja
CVE-2025-67585
Flexmls® IDX <= 3.15.7 - Unauthenticated Open Redirect
Media
CVE-2025-59132
Duplicate Content Cure <= 1.0 - Cross-Site Request Forgery
Media
CVE-2025-62993
Notification for Telegram <= 3.5.1 - Missing Authorization
Media
CVE-2025-64237
Quick Interest Slider <= 3.1.5 - Cross-Site Request Forgery
Media
CVE-2025-62085
BERTHA AI <= 1.13 - Missing Authorization
Media
CVE-2025-49347
sIFR <= 0.6.8.1 - Cross-Site Request Forgery
Media
CVE-2025-62153
Quick Interest Slider <= 3.1.5 - Missing Authorization
Media
CVE-2025-64638
OnPay.io for WooCommerce <= 1.0.47 - Missing Authorization
Alta
CVE-2025-12183
LZ4 Java Compression has Out-of-bounds memory operations which can cause DoS
Baja
CVE-2025-66372
Mustangproject allows exfiltrating files via XXE attacks
Media
CVE-2025-66114
Show Variations as Single Products Woocommerce <= 2.0 - Missing Authorization
Media
CVE-2025-64292
Analytics Germanized for Google Analytics <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-12820
Pure WC Variation Swatches <= 1.1.7 - Missing Authorization to Unauthenticated Settings Update
Media
CVE-2025-66065
Gutenverse <= 3.2.1 - Missing Authorization
Alta
CVE-2025-13307
Ocean Modal Window <= 2.3.2 - Authenticated (Editor+) Remote Code Execution
Media
CVE-2025-66079
Gutenverse Form <= 2.2.0 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.