Alta
CVE-2025-26530
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Alta
CVE-2025-26529
Moodle has a stored XSS risk in admin live log
Media
CVE-2025-26526
Moodle's feedback response viewing and deletions did not respect Separate Groups mode
Alta
CVE-2025-26525
Moodle has an arbitrary file read risk through pdfTeX
Media
CVE-2025-26527
Moodle's non-searchable tags can still be discovered on the tag search page and in the tags block
Baja
CVE-2025-26528
Moodle has a stored XSS in ddimageortext question type
Alta
CVE-2025-26533
Moodle has a SQL injection risk in course search module list filter
Baja
CVE-2025-26531
Moodle has an IDOR in badges allows disabling of arbitrary badges
Baja
CVE-2025-26532
Moodle allows teachers to evade trusttext config when restoring glossary entries
Alta
CVE-2025-71403
Better Auth allows bypassing the trustedOrigins Protection which leads to ATO
Media
CVE-2025-27143
Beter Auth has an Open Redirect via Scheme-Less Callback Parameter
Media
CVE-2025-27317
RAYS Grid <= 1.3.1 - Cross-Site Request Forgery
Media
CVE-2025-26883
Animated Text Block <= 1.0.7 - Missing Authorization
Media
CVE-2025-27316
JPG, PNG Compression and Optimization <= 1.7.35 - Cross-Site Request Forgery
Media
CVE-2025-26972
Private Content <= 8.11.5 - Reflected Cross-Site Scripting
Media
CVE-2025-27311
Bulk Content Creator <= 1.2.1 - Cross-Site Request Forgery
Media
CVE-2025-26969
Private Content <= 8.11.5 - Missing Authorization
Media
CVE-2025-1063
Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure
Alta
CVE-2025-27272
VG PostCarousel <= 1.1 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2025-27307
Quotes llama <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-1262
Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypass
Media
CVE-2025-27349
Get Posts <= 0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-26924
Ohio Extra <= 3.4.7 - Unauthenticated Arbitrary Shortcode Execution
Media
CVE-2025-27320
Profile Widget Ninja <= 4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.