Media
CVE-2025-12015
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2025-10295
Angel – Fashion Model Agency WordPress CMS Theme <= 3.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Baja
CVE-2025-13083
Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels
Baja
CVE-2025-13082
Drupal core allows Content Spoofing
Media
CVE-2025-13081
Drupal core allows Object Injection
Baja
CVE-2025-13080
Drupal core allows Forceful Browsing
Media
CVE-2025-12620
Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter
Media
CVE-2025-12891
Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Information Exposure
Media
CVE-2025-12366
Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.5 - Authenticated (Author+) Insecure Direct Object Reference
Media
CVE-2025-12536
SureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Media
CVE-2025-12892
Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Limited Option Update
Alta
CVE-2025-11923
LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes - Various Versions - Authenticated (Student+) Privilege Escalation
Alta
CVE-2025-12998
TYPO3 Modules Extension has Improper Authentication vulnerability
Alta
CVE-2025-12844
AI Engine <= 3.1.8 - Authenticated (Subscriber+) PHP Object Injection via PHAR Deserialization
Media
CVE-2025-67559
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.5 - Missing Authorization
Media
CVE-2025-67472
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.5 - Cross-Site Request Forgery
Alta
CVE-2025-12733
Import any XML, CSV or Excel File to WordPress (WP All Import) <= 3.9.6 - Authenticated (Administrator+) Remote Code Execution via Conditional Logic
Media
CVE-2025-64218
Passster <= 4.2.19 - Unauthenticated Information Exposure
Media
CVE-2025-12954
Timetable and Event Schedule by MotoPress <= 2.4.15 - Insecure Direct Object Reference to Authenticated (Contributor+) Event Disclosure
Media
CVE-2025-12377
Gallery Plugin for WordPress – Envira Photo Gallery <= 1.12.0 - Missing Authorization to Authenticated (Author+) Multiple Gallery Actions
Media
CVE-2025-64293
0 Day Analytics <= 4.0.0 - Authenticated (Administrator+) SQL Injection
Media
CVE-2025-12681
Comment Edit Core – Simple Comment Editing <= 3.1.0 - Unauthenticated Sensitive Information Exposure
Media
CVE-2025-12979
Welcart e-Commerce <= 2.11.24 - Missing Authorization to Unauthenticated Information Exposure
Media
CVE-2025-12089
Data Tables Generator by Supsystic <= 1.10.45 - Authenticated (Admin+) Arbitrary File Deletion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.