Media
CVE-2025-58661
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2025-58247
TI WooCommerce Wishlist <= 2.10.0 - Missing Authorization
Media
CVE-2025-59589
Soledad <= 8.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-58689
Tapfiliate <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-58678
Accordion <= 2.3.15 - Missing Authorization
Media
CVE-2025-57922
Envíos Coordinadora Woocommerce <= 1.1.31 - Unauthenticated Sensitive Information Exposure
Media
CVE-2025-58019
Search Atlas SEO <= 2.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-58260
Highlight and Share – Social Text and Image Sharing <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-57994
Upcoming Events Lists <= 1.4.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Media
CVE-2025-58674
WordPress <= 6.8.2 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2025-57992
Mail Baby SMTP <= 2.8 - Cross-Site Request Forgery
Media
CVE-2025-58234
JS Job Manager <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-58655
Category Featured Images <= 1.1.8 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2025-58016
CF7 Submissions <= 0.26 - Missing Authorization
Crítica
CVE-2025-9321
WPCasa <= 1.4.1 - Unauthenticated Code Injection
Media
CVE-2025-57936
Subresource Integrity (SRI) Manager <= 0.4.0 - Missing Authorization
Media
CVE-2025-57933
Piotnet Forms <= 1.0.30 - Cross-Site Request Forgery
Media
CVE-2025-58002
GD bbPress Tools <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-58265
Events Manager – OpenStreetMaps <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-53458
Goracash <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-57898
WP Frontend Admin <= 1.22.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-58649
All In One SEO Pack <= 4.8.7.1 - Authenticated (Contributor+) Sensitive Information Exposure
Media
CVE-2025-58682
Kama Click Counter <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-59582
Ajax Load More <= 7.6.0.2 - Unauthenticated Sensitive Information Exposure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.