Alta
CVE-2025-27892
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.687
Media
CVE-2025-3100
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
Baja
CVE-2025-30166
Pimcore's Admin Classic Bundle allows HTML Injection
Alta
CVE-2025-30151
Shopware allows Denial Of Service via password length
Media
CVE-2025-30150
Shopware 6 allows attackers to check for registered accounts through the store-api
Alta
CVE-2025-31599
Bulk Product Sync <= 8.6 - Unauthenticated SQL Injection
Alta
CVE-2025-32145
WpEvently <= 4.3.6 - Authenticated (Contributor+) PHP Object Injection
Alta
CVE-2025-32140
WP Remote Thumbnail <= 1.3.2 - Authenticated (Contributor+) Arbitrary File Upload
Media
CVE-2024-12273
Calculated Fields Form <= 5.2.61 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2025-32206
Processing Projects <= 1.0.2 - Authenticated (Shop Manager+) Arbitrary File Upload
Media
CVE-2025-32214
Hive Support <= 1.2.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2025-32240
Site Notify <= 1.0 - Missing Authorization
Alta
CVE-2025-31524
WP User Profiles <= 2.6.2 - Authenticated (Subscriber+) Privilege Escalation
Alta
CVE-2025-32202
Insert or Embed Articulate Content into WordPress <= 4.3000000025 - Authenticated (Editor+) Arbitrary File Upload
Media
CVE-2025-2883
Accept SagePay Payments Using Contact Form 7 <= 2.0 - Unauthenticated Information Exposure
Media
CVE-2025-32029
ts-asn1-der has Incorrect DER Encoding of Numbers Leading to Denial of Service and Incorrect Value Representation
Alta
CVE-2025-2807
Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
Media
CVE-2025-29480
Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid
Alta
CVE-2025-3064
WPFront User Role Editor <= 4.2.1 - Cross-Site Request Forgery to Privilege Escalation via whitelist_options Function
Media
CVE-2025-2882
GreenPay(tm) by Green.Money 3.0.0 - 3.0.9 - Unauthenticated Information Exposure
Media
CVE-2025-32014
estree-util-value-to-estree allows prototype pollution in generated ESTree
Alta
CVE-2025-32031
Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Optimization Bypass
Alta
CVE-2025-32030
Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion
Media
CVE-2025-71332
FlowiseDB vulnerable to SQL Injection by authenticated users
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.