Media
CVE-2025-66096
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2025-62740
WP-CRM System <= 3.4.6 - Missing Authorization
Media
CVE-2025-62873
Flashy Marketing Automation <= 2.0.8 - Cross-Site Request Forgery
Media
CVE-2025-62870
Eupago Gateway For Woocommerce <= 4.7.1 - Missing Authorization
Alta
CVE-2025-12705
Social Reviews & Recommendations <= 2.5 - Unauthenticated Stored Cross-Site Scripting via Social Media Reviews
Media
CVE-2025-67468
Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.4.6 - Missing Authorization
Media
CVE-2025-63034
Page View Count <= 2.9.1 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Media
CVE-2025-62997
EasyCart <= 5.8.11 - Unauthenticated Information Exposure
Media
CVE-2025-13642
ProfilePress <= 4.16.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Media
CVE-2025-62998
AI CoPilot <= 1.2.7 - Authenticated (Contributor+) Sensitive Information Exposure
Media
CVE-2025-13417
Plugin Organizer <= 10.2.3 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2025-67578
Email Capture <= 3.12.4 - Missing Authorization
Media
CVE-2025-63057
Ultimate Review <= 2.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-66531
Salon booking system <= 10.30.3 - Cross-Site Request Forgery
Media
CVE-2025-67589
WooCommerce PDF Invoices & Packing Slips <= 4.9.1 - Missing Authorization
Media
CVE-2025-63033
Make Section & Column Clickable For Elementor <= 2.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Media
CVE-2025-63063
Yandex.Metrica <= 1.2.2 - Missing Authorization
Media
CVE-2025-62082
Generic Elements <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-63056
Contact Form by BestWebSoft <= 4.3.6 - Missing Authorization
Media
CVE-2025-62866
Auto Alt Text <= 2.5.2 - Cross-Site Request Forgery
Media
CVE-2025-66067
Funnel Builder by FunnelKit <= 3.13.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-49350
Actionwear products sync <= 2.3.3 - Missing Authorization
Media
CVE-2025-67950
All In One SEO Pack <= 4.9.1 - Authenticated (Contributor+) SQL Injection
Media
CVE-2026-24942
WpEvently <= 5.1.1 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.