Alta
CVE-2025-31002
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.690
Crítica
CVE-2025-32663
FAT Cooming Soon <= 1.1 - Unauthenticated Local File Inclusion
Alta
CVE-2025-32550
Click & Pledge Connect Plugin <= 2.24080000-WP6.6.1 - Unauthenticated SQL Injection
Media
CVE-2025-32559
REVE Chat <= 6.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-32494
reCAPTCHA Jetpack <= 0.2.2 - Cross-Site Request Forgery
Media
CVE-2025-32597
WordPress Events Calendar Plugin – connectDaily <= 1.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-32619
KeyCAPTCHA <= 2.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-32650
Accessibility Suite by Online ADA <= 4.18 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2025-32493
BP Social Connect <= 1.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-32501
RentSyst <= 2.0.92 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-30965
WPJobBoard < 5.11.1 - Cross-Site Request Forgery
Media
CVE-2025-26902
Brizy Pro <= 2.8.0 - Cross-Site Request Forgery
Alta
CVE-2025-32144
Job Board Manager <= 2.1.60 - Authenticated (Contributor+) PHP Object Injection
Media
CVE-2025-32598
WP Table Builder <= 2.0.5 - Reflected Cross-Site Scripting
Media
CVE-2025-32563
WP Calais Auto Tagger <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Alta
CVE-2025-32543
Canonical Attachments <= 1.7 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2025-31034
Customize Login Page <= 1.1 - Cross-Site Request Forgery
Media
CVE-2025-32500
Codescar Radio Widget <= 0.4.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-32694
Ultimate WP Mail <= 1.3.9 - Open Redirect
Media
CVE-2025-31004
Rich Table of Contents <= 1.4.0 - Missing Authorization
Media
CVE-2025-26901
Brizy Pro <= 2.8.0 - Missing Authorization
Media
CVE-2025-32581
WordPress Spam Blocker <= 2.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-31391
Script Compressor <= 1.7.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-32667
Doppler Forms <= 2.5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.