Baja
CVE-2025-59829
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.728
Alta
CVE-2025-59536
Claude Code can execute commands prior to the startup trust dialog
Media
CVE-2025-11227
GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns Disclosure
Media
CVE-2025-11228
GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms-Campaign Association
Crítica
CVE-2025-9485
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()
Alta
CVE-2025-9243
Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions
Media
CVE-2025-9030
Majestic Before After Image <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-9029
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.16 - Missing Authentication via wdkit_handle_review_submission Function
Media
CVE-2025-8726
WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload
Media
CVE-2025-9886
Trinity Audio <= 5.20.2 - Cross-Site Request Forgery
Alta
CVE-2025-62025
JobSearch < 3.0.8 - Unauthenticated PHP Object Injection
Media
CVE-2025-49940
Fusion Builder <= 3.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-64634
Avada <= 7.13.2 - Missing Authorization
Media
CVE-2025-62917
Tooltipy <= 5.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-10874
Orbit Fox by ThemeIsle <= 3.0.1 - Authenticated (Author+) Server-Side Request Forgery
Media
CVE-2025-9978
Jeg Kit for Elementor – Powerful Elementor Addons, Widgets & Templates for WordPress < 2.6.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Media
CVE-2025-9204
X Addons for Elementor <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Video ID Field
Crítica
CVE-2025-10726
WPRecovery <= 2.0 - Unauthenticated SQL Injection to Arbitrary File Deletion
Media
CVE-2025-9199
Woo superb slideshow transition gallery with random effect <= 9.1 - Authenticated (Contributor+) SQL Injection
Media
CVE-2025-9206
Meks Easy Maps <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-9045
Easy Elementor Addons <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-9895
Notification Bar <= 2.2 - Cross-Site Request Forgery
Media
CVE-2025-9333
Smart Docs <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2025-10053
TableGen – Data Table Generator <= 1.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.