Alta
CVE-2025-68063
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2025-66123
BookPro - Appointment Booking WordPress Plugin <= 1.1.0 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2026-3462
Frisbii Pay <= 1.8.9 - Missing Authorization to Authenticated (Subscriber+) Payment Token Modification
Media
CVE-2026-57323
HTML5 Video Player – Embed and Play Videos in Custom Player <= 2.11.0 - Missing Authorization
Media
CVE-2026-57661
WPComplete <= 2.9.5.5 - Missing Authorization
Media
CVE-2026-57635
FunnelKit Payment Gateway for Stripe WooCommerce <= 1.14.0.3 - Cross-Site Request Forgery
Media
CVE-2026-57638
Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-57660
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.1 - Missing Authorization
Media
CVE-2026-57656
Hester Core <= 1.1.8 - Authenticated (Author+) Stored Cross-Site Scripting
Alta
CVE-2026-57321
Interactive Content – H5P <= 1.17.7 - Authenticated (Contributor+) Arbitrary File Deletion
Alta
CVE-2025-68064
Goya Core < 1.0.9.4 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2026-57325
NanoMag <= 1.8 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-57322
weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce <= 2.1.2 - Reflected Cross-Site Scripting
Media
CVE-2026-57657
Gmail SMTP <= 1.2.3.19 - Cross-Site Request Forgery
Media
CVE-2026-12393
WPS Bookings for WooCommerce <= 3.11.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Booking Order Cancellation
Media
CVE-2026-57645
Newsletters <= 4.13 - Missing Authorization
Media
CVE-2025-68075
BNE Testimonials <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-57620
Exclusive Addons for Elementor <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2026-57643
WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars <= 3.9.1 - Authenticated (Contributor+) SQL Injection
Media
CVE-2026-12083
Admin and Site Enhancements <= 8.8.3 - Missing Authorization
Media
CVE-2026-57654
Affiliates Manager <= 2.9.49 - Missing Authorization
Media
CVE-2026-57641
Real Estate 7 WordPress <= 3.5.9 - Cross-Site Request Forgery
Media
CVE-2026-57655
Child Theme Wizard <= 1.4 - Cross-Site Request Forgery
Media
CVE-2026-57653
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website <= 2.5.2 - Authenticated (Contributor+) SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.