Media
CVE-2025-58788
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2025-58873
Pushe Web Push Notification <= 0.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2025-49361
Mamita <= 1.0.9 - Unauthenticated Local File Inclusion
Media
CVE-2025-58808
prettyPhoto <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-58859
Add to Feedly <= 1.2.11 - Cross-Site Request Forgery
Media
CVE-2025-58844
Database to Excel <= 1.0 - Cross-Site Request Forgery
Media
CVE-2025-58798
BCM Duplicate Menu <= 1.1.2 - Cross-Site Request Forgery
Media
CVE-2025-9057
Biagiotti Core <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2025-58880
Translate This gTranslate Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-58832
Search by Google <= 1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Crítica
CVE-2025-8359
AdForest <= 6.0.9 - Authentication Bypass to Admin
Alta
CVE-2025-49371
Strux <= 1.9 - Unauthenticated Local File Inclusion
Media
CVE-2025-58858
WPB Image Widget <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-58836
FW Anker <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-9085
User Registration & Membership <= 4.3.0 - Authenticated (Admin+) SQL Injection
Media
CVE-2025-58857
Table of content <= 1.5.3.1 - Cross-Site Request Forgery
Alta
CVE-2025-49369
Lettuce <= 1.1.7 - Unauthenticated Local File Inclusion
Media
CVE-2025-58843
Auto Last Youtube Video <= 1.0.7 - Cross-Site Request Forgery
Media
CVE-2025-58825
Comment Form WP – Customize Default Comment Form <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-58799
Custom WooCommerce Checkout Fields Editor <= 1.3.4 - Cross-Site Request Forgery
Media
CVE-2025-58869
SimaCookie <= 1.3.2 - Cross-Site Request Forgery
Alta
CVE-2025-9515
Multi Step Form <= 1.7.25 - Authenticated (Admin+) Arbitrary File Upload
Media
CVE-2025-58883
Search Cloud One <= 2.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-58804
WooCommerce Single Page Checkout <= 1.2.7 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.