Media
CVE-2025-32610
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.687
Media
CVE-2025-32553
RestroPress <= 3.2.8.6 - Reflected Cross-Site Scripting
Alta
CVE-2025-32692
WP Subscription Forms <= 1.2.4 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2025-31392
Smart Product Gallery Slider <= 1.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-31379
Insert HTML Here <= 1.0 - Reflected Cross-Site Scripting
Crítica
CVE-2025-32577
Build App Online <= 1.0.23 - Unauthenticated Local File Inclusion
Media
CVE-2025-32599
Task Scheduler <= 1.6.3 - Reflected Cross-Site Scripting
Media
CVE-2025-32484
WP-Planification <= 2.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-32693
WebinarPress <= 1.33.27 - Open Redirect
Media
CVE-2025-32492
Admin Menu Post List <= 2.0.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2025-31033
Buddypress Humanity <= 1.2 - Cross-Site Request Forgery to Privilege Escalation
Media
CVE-2025-26888
WooCommerce Multilingual & Multicurrency <= 5.3.8 - Missing Authorization
Media
CVE-2025-32556
Simple Post Meta Manager <= 1.0.9 - Reflected Cross-Site Scripting
Sin evaluar
825
Convert Forms - XSS (Cross Site Scripting)
Baja
CVE-2025-27192
Magento does not properly protect credentials
Media
CVE-2025-27191
Magento Improper Access Control leads to Security feature bypass
Media
CVE-2025-27190
Magento Improper Access Control leads to Security feature bypass
Media
CVE-2025-27188
Magento Improper Authorization vulnerability
Crítica
CVE-2025-22871
RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency
Media
CVE-2024-52981
Elasticsearch Vulnerable to Stack Overflow due to a Large Recursion
Media
CVE-2025-25226
Joomla Framework Database Package Vulnerable to SQL Injection
Alta
CVE-2025-25227
Joomla CMS Multi-Factor Authentication Bypass
Media
CVE-2024-52980
Elasticsearch-grok Potential Node Crash due to Large Recursion in `innerForbidCircularReferences` Function
Media
ghsa-68wv-g3fw-pq7q
Shopware Broken ACL on Document retrieval to access other customers documents
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.