Media
CVE-2025-32608
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.737
Crítica
CVE-2025-26735
Grip <= 1.0.9 - Unauthenticated Local File Inclusion
Media
CVE-2025-26954
ZooEffect <= 1.11 - Reflected Cross-Site Scripting
Media
CVE-2025-32507
Event Espresso – Custom Email Template Shortcode <= 1.0.0 - Reflected Cross-Site Scripting
Crítica
CVE-2025-32486
Material Dashboard <= 1.4.6 - Unauthenticated Privilege Escalation
Alta
CVE-2025-32527
T&P Gallery Slider <= 1.2 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2025-32622
OTP-less one tap Sign in <= 2.0.58 - Reflected Cross-Site Scripting
Crítica
CVE-2025-32648
Projectopia <= 5.1.25.2 - Unauthenticated Privilege Escalation via Account Takeover
Media
CVE-2025-32592
TableOn – WordPress Posts Table Filterable <= 1.0.3 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2025-26992
Landing Page Cat <= 1.7.8 - Reflected Cross-Site Scripting
Alta
CVE-2025-32647
Question Answer <= 1.2.70 - Authenticated (Subscriber+) PHP Object Injection
Media
CVE-2025-32638
ShopApper <= 0.4.62 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2025-26872
Eximius <= 2.2 - Authenticated (Subscriber+) Arbitrary File Upload
Media
CVE-2025-27009
My auctions allegro <= 3.6.33 - Cross-Site Request Forgery
Media
CVE-2025-32546
All push notification for WP <= 1.5.3 - Reflected Cross-Site Scripting
Media
CVE-2025-22774
CRUDLab Scroll to Top <= 1.0.1 - Reflected Cross-Site Scripting
Media
CVE-2025-32605
MemberPress Discord Addon <= 1.1.1 - Reflected Cross-Site Scripting
Media
CVE-2025-32609
Verowa Connect <= 3.0.4 - Reflected Cross-Site Scripting
Media
CVE-2025-62094
Void Elementor WHMCS Elements For Elementor Page Builder <= 2.0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-32545
WooCommerce Products without featured images <= 0.1 - Cross-Site Request Forgery
Crítica
CVE-2025-32660
JS Job Manager <= 2.0.2 - Unauthenticated Arbitrary File Upload
Alta
CVE-2025-32657
Testimonial Slider And Showcase Pro <= 2.1.7 - Authenticated (Subscriber+) Local File Inclusion
Media
CVE-2025-3583
Newsletter <= 8.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2025-32636
Local Magic <= 2.6.0 - Unauthenticated SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.