Media
CVE-2025-32225
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.822
Restablecer filtros
Media
CVE-2025-32271
Woocommerce Role Pricing <= 3.5.5 - Cross-Site Request Forgery
Media
CVE-2025-32234
AdMail – Multilingual Back in-Stock Notifier for WooCommerce <= 1.7.0 - Missing Authorization
Media
CVE-2025-32184
Ultimate Store Kit Elementor Addons <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-32181
Search, Filters & Merchandising for WooCommerce <= 3.0.58 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-32236
Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Vagonic <= 1.9 - Missing Authorization
Media
CVE-2025-32263
Sequential Order Numbers for WooCommerce <= 3.6.2 - Cross-Site Request Forgery
Media
CVE-2025-32231
Bookingor <= 2.0.1 - Missing Authorization
Media
CVE-2025-32207
Ni WooCommerce Cost Of Goods <= 3.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Crítica
CVE-2025-2907
Order Delivery Date for WooCommerce 2.0 - 12.3.1- Unauthenticated Arbitrary Options Update
Media
CVE-2025-32268
QR Code Tag for WC order emails <= 1.9.36 - Cross-Site Request Forgery
Media
CVE-2025-32241
Official CleverReach Plugin for WooCommerce <= 3.4.4 - Cross-Site Request Forgery to Settings Update
Crítica
CVE-2025-31405
Fami WooCommerce Compare <= 1.0.5 - Unauthenticated Local File Inclusion
Media
CVE-2025-32188
Advanced Woo Labels <= 2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2024-13708
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2025-2317
Product Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend Parameter
Alta
CVE-2024-13744
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload
Media
CVE-2025-31795
Shopify to WooCommerce Migration <= 1.3.0 - Missing Authorization to Unauthenticated Settings Update
Media
CVE-2025-31758
Free Woocommerce Product Table View <= 1.78 - Missing Authorization to Arbitrary Content Deletion
Media
CVE-2025-31794
WR Price List Manager For Woocommerce <= 1.0.8 - Missing Authorization to Arbitrary Content Deletion
Media
CVE-2025-31829
ShopCred <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-31781
Gift Cards for WooCommerce <= 1.5.8 - Missing Authorization
Media
CVE-2025-31879
Barcode Generator for WooCommerce <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Media
CVE-2025-31866
ShipDepot for WooCommerce <= 1.2.19 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.