Alta
CVE-2025-32158
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Media
CVE-2025-32126
Pay with Contact Form 7 <= 1.0.4 - Authenticated (Administrator+) SQL Injection
Media
CVE-2025-32188
Advanced Woo Labels <= 2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-13898
Simple Banner <= 3.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2024-13708
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2025-2270
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.8.9.1 - Unauthenticated Limited Local File Inclusion
Crítica
CVE-2024-13645
TagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object Instantiation
Alta
CVE-2025-2317
Product Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend Parameter
Alta
CVE-2025-2075
Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Alta
CVE-2024-13744
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload
Media
CVE-2025-31825
Category Icon <= 1.0.1 - Authenticated (Author+) Arbitrary File Download
Media
CVE-2025-30596
include-file <= 1 - Authenticated (Contributor+) Arbitrary File Download
Media
CVE-2025-30915
Small Package Quotes – Worldwide Express Edition <= 5.2.19 - Missing Authorization
Crítica
CVE-2025-31381
Booking Calendar and Notification <= 4.0.3 - Authentication Bypass
Media
CVE-2025-31907
Team Builder <= 1.3 - Reflected Cross-Site Scripting
Media
CVE-2025-31800
Publitio <= 2.2.1 - Authenticated (Contributor+) Arbitrary File Read
Media
CVE-2025-31468
WP_Identicon <= 2.0 - Reflected Cross-Site Scripting
Media
CVE-2025-30611
Wptobe-signinup <= 1.1.2 - Reflected Cross-Site Scripting
Alta
CVE-2025-2780
Woffice Core <= 5.4.21 - Authenticated (Subscriber+) Arbitrary File Upload
Media
CVE-2025-31789
TextMe SMS <= 1.9.1 - Missing Authorization
Crítica
CVE-2025-2798
Woffice <= 5.4.21 - Authentication Bypass via Registration Role
Alta
CVE-2025-31403
Booking Calendar and Notification <= 4.0.3 - Unauthenticated SQL Injection
Media
CVE-2025-31554
Docxpresso <= 2.6 - Authenticated (Contributor+) Arbitrary File Download
Media
CVE-2025-0671
Email Subscribers & Newsletters <= 5.7.49 - Authenticated (Administrator+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.