Media
CVE-2025-59559
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.822
Restablecer filtros
Media
CVE-2025-59565
Upsell Order Bump Offer for WooCommerce <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-57905
AgreeMe Checkboxes For WooCommerce <= 1.1.3 - Cross-Site Request Forgery
Media
CVE-2025-58656
Estonian Shipping Methods for WooCommerce <= 1.7.2 - Unauthenticated Sensitive Information Exposure
Media
CVE-2025-53455
CashBill.pl - Płatności WooCommerce <= 3.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-57977
Flexible PDF Invoices for WooCommerce & WordPress <= 6.0.13 - Cross-Site Request Forgery
Media
CVE-2025-57904
Sales Count Manager for WooCommerce <= 2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2025-59567
Coupon Affiliates <= 6.8.0 - Missing Authorization
Media
CVE-2025-58702
MarketKing <= 2.0.92 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-57908
Product Time Countdown for WooCommerce <= 1.6.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Media
CVE-2025-57917
Printcart Web to Print Product Designer for WooCommerce <= 2.4.3 - Missing Authorization
Media
CVE-2025-58685
Cecabank WooCommerce Plugin <= 0.3.4 - Missing Authorization
Media
CVE-2025-59570
Mail Mint <= 1.18.6 - Authenticated (Administrator+) SQL Injection
Media
CVE-2025-58228
Quick View for WooCommerce <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-57961
CoDesigner <= 4.30 - Missing Authorization
Media
CVE-2025-58017
Ultimate Store Kit Elementor Addons <= 2.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-57903
WooCommerce Additional Fees On Checkout (Free) <= 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Crítica
CVE-2025-10412
Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) <= 4.9.55 - Unauthenticated Arbitrary File Upload via 'uni_cpo_upload_file'
Media
CVE-2025-57967
WPB Quick View for WooCommerce <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-58686
Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection
Alta
CVE-2025-64266
Booking and Rental Manager <= 2.5.4 - Authenticated (Contributor+) PHP Object Injection
Alta
CVE-2025-53425
Dokan <= 4.1.3 - Authenticated (Shop Manager+) Privilege Escalation
Media
CVE-2025-53424
WooCommerce Orders & Customers Exporter <= 5.4 - Missing Authorization
Media
CVE-2025-53422
WhatsApp Chat for WordPress and WooCommerce <= 1.2.1 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.