Alta
CVE-2025-12735
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2025-63011
Hotel Booking <= 2.2.8 - Authenticated (Editor+) Stored Cross-Site Scripting
Media
CVE-2025-63013
Hotel Booking <= 2.2.7 - Unauthenticated Information Exposure
Media
CVE-2025-63012
Hotel Booking <= 2.2.8 - Cross-Site Request Forgery
Crítica
CVE-2025-12061
Tax Service Electronic HDM <= 1.2.0 - Unauthenticated Arbitrary SQL Injection
Media
CVE-2025-62107
Feather Login Page <= 1.1.7 - Cross-Site Request Forgery
Alta
CVE-2025-12497
Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]
Media
CVE-2025-11745
Ad Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
Media
CVE-2025-11987
Visual Link Preview <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via visual-link-preview Shortcode
Media
CVE-2025-12468
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure
Media
CVE-2025-11820
Graphina – Elementor Charts and Graphs <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Widgets
Media
CVE-2025-12192
The Events Calendar <= 6.15.9 - Sysinfo Key Incorrect Comparison to Unauthenticated Sensitive Information Exposure
Media
CVE-2025-12469
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Media
CVE-2025-12675
KiotViet Sync <= 1.8.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Media
CVE-2025-12676
KiotViet Sync <= 1.8.5 - Use of Hard-coded Password to Authorization Bypass
Media
CVE-2025-11373
Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type Upload
Media
CVE-2025-12388
B Carousel Block – Responsive Image and Content Carousel <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery
Alta
CVE-2025-12139
File Manager for Google Drive – Integrate Google Drive with WordPress <= 1.5.3 - Unauthenticated Sensitive Information Exposure
Alta
CVE-2025-12384
Document Embedder – Embed PDFs, Word, Excel, and Other Files <= 2.0.0 - Missing Authorization to Unauthenticated Document Manipulation
Media
CVE-2025-11917
WPeMatico RSS Feed Fetcher <= 2.8.11 - Authenticated (Subscriber+) Server-Side Request Forgery via wpematico_test_feed
Crítica
CVE-2025-11749
AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation
Alta
CVE-2025-12197
The Events Calendar 6.15.1.1 - 6.15.9 - Unauthenticated SQL Injection via s
Media
CVE-2025-11162
Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS
Baja
ghsa-j2pc-v64r-mv4f
Protobuf Maven Plugin protocDigest is ignored when using protoc from PATH
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.