Alta
CVE-2025-57925
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Alta
CVE-2025-53450
Easy Pricing Table WP <= 1.1.3 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2025-10380
Advanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTI
Media
CVE-2025-53457
SEO Backlink Monitor <= 1.6.0 - Authenticated (Administrator+) Server-Side Request Forgery
Crítica
CVE-2025-10412
Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) <= 4.9.55 - Unauthenticated Arbitrary File Upload via 'uni_cpo_upload_file'
Alta
CVE-2025-59588
Soledad <= 8.6.8 - Authenticated (Contributor+) Local File Inclusion
Crítica
CVE-2025-10147
Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload
Media
CVE-2025-57943
Skimlinks Affiliate Marketing Tool <= 1.3 - Authenticated (Administrator+) Server-Side Request Forgery
Alta
CVE-2025-10647
Embed PDF for WPForms <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Upload
Alta
CVE-2025-58995
Leblix <= 2.4 - Unauthenticated Local File Inclusion
Crítica
CVE-2025-58963
Medcity < 1.1.9 - Unauthenticated Arbitrary File Upload
Alta
CVE-2025-10058
WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Authenticated (Subscriber+) Arbitrary File Deletion
Alta
CVE-2025-10162
Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 13.5 - Unauthenticated Arbitrary File Read
Media
CVE-2025-10050
Developer Loggers for Simple History <= 0.5 - Authenticated (Admin+) Local File Inclusion
Alta
CVE-2025-9216
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload
Media
CVE-2025-10042
Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection
Alta
CVE-2025-10143
Catch Dark Mode <= 2.0 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2025-9215
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Download
Alta
CVE-2025-58967
Businext < 2.4.4 - Unauthenticated Local File Inclusion
Alta
CVE-2025-10176
The Hack Repair Guy's Plugin Archiver <= 2.0.4 - Authenticated (Administrator+) Arbitrary File Deletion
Alta
CVE-2025-64377
ListingPro < 2.9.10 - Unauthenticated Local File Inclusion
Alta
CVE-2025-8575
LWS Cleaner <= 2.4.1.3 - Authenticated (Administrator+) Arbitrary File Deletion via 'lws_cl_delete_file'
Alta
CVE-2025-8422
Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read
Alta
CVE-2025-9874
Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.