Media
CVE-2025-13894
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Media
CVE-2025-13626
myLCO <= 0.8.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Crítica
CVE-2025-12673
Flex QR Code Generator <= 1.2.7 - Unauthenticated Arbitrary File Upload
Alta
CVE-2025-63076
The7 Elements < 2.7.12 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2025-12851
My auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controller
Media
CVE-2025-13515
Nouri.sh Newsletter <= 1.0.1.3 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Alta
CVE-2013-6880
Time Sheets <= 2.1.3 - Use of Known Vulnerable Component
Media
CVE-2025-13625
WP-SOS-Donate Donation Sidebar Plugin <= 0.9.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Alta
CVE-2025-12181
ContentStudio <= 1.3.7 - Authenticated (Author+) Arbitrary File Upload
Alta
CVE-2025-12153
Featured Image via URL <= 0.1 - Authenticated (Contributor+) Arbitrary FIle Upload
Alta
CVE-2025-12154
Auto Thumbnailer <= 1.0 - Authenticated (Contributor+) Arbitrary File Upload
Media
CVE-2025-13512
CoSign Single Signon <= 0.3.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Alta
CVE-2025-13066
Demo Importer Plus <= 2.0.6 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass
Alta
CVE-2025-13543
PostGallery <= 1.12.5 - Authenticated (Subscriber+) Arbitrary File Upload
Media
CVE-2025-13513
Clik stats <= 0.8 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Crítica
CVE-2025-13407
Gravity Forms <= 2.9.23.0 - Unauthenticated Arbitrary File Upload
Crítica
CVE-2025-13486
Advanced Custom Fields: Extended 0.9.0.5 - 0.9.1.1 - Unauthenticated Remote Code Execution in prepare_form
Alta
CVE-2025-13646
Modula 2.13.1 - 2.13.2 - Authenticated (Author+) Arbitrary File Upload via Race Condition
Alta
CVE-2025-13645
Modula 2.13.1 - 2.13.2 - Authenticated (Author+) Arbitrary File Deletion
Alta
CVE-2025-13516
SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers <= 1.9.0 - Unauthenticated Arbitrary File Upload
Media
CVE-2025-13606
Export All Posts, Products, Orders, Refunds & Users <= 2.19 - Cross-Site Request Forgery to Sensitive Information Exposure
Alta
CVE-2025-63017
WerkStatt <= 1.6.6 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2025-13307
Ocean Modal Window <= 2.3.2 - Authenticated (Editor+) Remote Code Execution
Alta
CVE-2025-62741
Pool Services <= 3.3 - Unauthenticated Server-Side Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.