Media
CVE-2025-62915
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2025-62910
Video Gallery by Huzzaz <= 10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-58959
Taskbot <= 6.4 - Authenticated (Subscriber+) Arbitrary File Deletion
Media
CVE-2025-62912
SiteGround Email Marketing <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-9075
ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns <= 2.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-10735
Block For Mailchimp – Easy Mailchimp Form Integration <= 1.1.12 - Unauthenticated Blind Server-Side Request Forgery
Media
CVE-2025-10744
File Manager, Code editor, backup by Managefy <= 1.6.1 - Unauthenticated Information Exposure
Media
CVE-2025-62911
Rock Convert <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-49911
WooCommerce Vehicle Parts Finder <= 3.7 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2025-62914
Effect Maker <= 1.2.1 - Missing Authorization
Media
CVE-2025-63070
Download Manager <= 3.3.32 - Authenticated (Subscriber+) Information Exposure
Media
CVE-2025-62913
Opal Service <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2025-10916
FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More < 1.0.4 - Unauthenticated Arbitrary File Deletion
Alta
CVE-2025-8877
AffiliateWP <= 2.28.2 - Unauthenticated SQL Injection
Alta
CVE-2025-59952
MinIO Java Client XML Tag Value Substitution Vulnerability
Media
CVE-2025-11163
SmartCrawl SEO checker, analyzer & optimizer <= 3.14.3 - Missing Authorization to Plugin Settings Update
Alta
CVE-2025-7052
LatePoint <= 5.1.94 - Cross-Site Request Forgery to Account Takeover via change_password() Function
Alta
CVE-2025-7038
LatePoint <= 5.1.94 - Unauthenticated Authentication Bypass via load_step Function
Media
CVE-2025-6941
LatePoint <= 5.1.94 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2025-6815
LatePoint <= 5.1.94 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-10131
All Social Share Options <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-9946
LockerPress – WordPress Security Plugin <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-8608
Mihdan: Elementor Yandex Maps <= 1.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marker Pins
Media
CVE-2025-10130
Layers <= 0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.