Media
CVE-2024-13791
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Crítica
CVE-2024-10763
Campress <= 1.35 - Unauthenticated Local File Inclusion
Crítica
CVE-2024-10960
Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads
Crítica
CVE-2024-13365
Security & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File Upload
Alta
CVE-2025-22630
Widget Options <= 4.1.0 - Authenticated (Contributor+) Remote Code Execution
Alta
CVE-2024-13714
All-Images.ai – IA Image Bank and Custom Image creation <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload
Crítica
CVE-2024-13011
WP Foodbakery <= 4.7 - Unauthenticated Arbitrary File Upload
Alta
CVE-2024-7419
WP All Export Pro <= 1.9.1 - Unauthenticated Remote Code Execution via Custom Export Fields
Media
CVE-2025-0859
Post and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function
Alta
CVE-2025-1028
Contact Manager <= 8.6.4 - Unauthenticated Arbitrary Double File Extension Upload
Alta
CVE-2025-22656
Cookie Monster <= 1.2.2 - Unauthenticated Local File Inclusion
Media
CVE-2025-22672
Video & Photo Gallery for Ultimate Member <= 1.1.2 - Authenticated (Subscriber+) Server-Side Request Forgery
Alta
CVE-2024-12859
BoomBox Theme Extensions <= 1.8.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Crítica
CVE-2025-22663
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.2.16 - Unauthenticated Arbitrary File Deletion
Crítica
CVE-2025-25122
WizShop <= 3.0.2 - Unauthenticated Local File Inclusion
Alta
CVE-2025-25162
Sports Rankings and Lists <= 1.0.2 - Unauthenticated Arbitrary File Download
Media
CVE-2025-25163
Plugin A/B Image Optimizer <= 3.3 - Authenticated (Subscriber+) Arbitrary File Download
Crítica
CVE-2025-25130
Delete Comments By Status <= 2.1.1 - Unauthenticated Local File Inclusion
Crítica
CVE-2025-25141
Fami Sales Popup <= 2.0.0 - Unauthenticated Local File Inclusion
Crítica
CVE-2025-25109
WP Vehicle Manager <= 3.1 - Unauthenticated Local File Inclusion
Media
CVE-2025-0365
Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read
Alta
CVE-2025-22701
Traveler Layout Essential For Elementor < 1.4 - Unauthenticated Server-Side Request Forgery
Media
CVE-2024-13371
WP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending
Alta
CVE-2025-0366
Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.