Media
CVE-2025-11274
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.728
Media
CVE-2025-62929
Testimonial Slider <= 2.0.15 - Missing Authorization
Media
CVE-2025-62927
Nelio Content <= 4.0.5 - Missing Authorization
Media
CVE-2025-62928
SEO Meta Description Updater <= 1.2.0 - Missing Authorization
Media
CVE-2025-63073
The7 < 12.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-62926
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-62925
Conversios.io <= 7.2.13 - Missing Authorization
Media
CVE-2025-43825
Liferay Portal exposes sensitive user data through its Freemarker template
Media
CVE-2025-62918
IgnitionDeck <= 2.0.10 - Missing Authorization
Media
CVE-2025-62922
Export Categories <= 1.0 - Missing Authorization
Media
CVE-2025-62923
Marquee Addons for Elementor <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-62919
TS Demo Importer <= 0.1.2 - Missing Authorization
Alta
CVE-2025-63074
The7 < 12.8.1.1 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2025-62921
Bulk Auto Image Title Attribute <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-62920
USERCENTRICS CMP <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-66058
Post Grid and Gutenberg Blocks <= 2.3.17 - Missing Authorization
Media
CVE-2025-62924
Post Grid and Gutenberg Blocks <= 2.3.17 - Missing Authorization
Media
CVE-2025-29192
Flowise Stored XSS vulnerability through logs in chatbot
Crítica
CVE-2025-50538
Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel
Media
CVE-2025-71331
Flowise vulnerable to XSS
Alta
CVE-2025-59943
phpMyFAQ duplicate email registration allows multiple accounts with the same email
Media
CVE-2025-10383
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2025-9952
Trinity Audio <= 5.20.2 - Reflected Cross-Site Scripting
Media
CVE-2025-10746
Integrate Dynamics 365 CRM <= 1.0.9 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.