Media
CVE-2024-13909
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtros
Media
CVE-2025-32567
Easy Post Duplicator <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2025-32558
Duplicate Title Checker <= 1.2 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2025-32687
Review Stars Count For WooCommerce <= 2.0 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2025-32677
WP Social Stream Designer <= 1.3 - Authenticated (Administrator+) SQL Injection
Media
CVE-2025-32618
Wishlist <= 1.0.44 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2025-32550
Click & Pledge Connect Plugin <= 2.24080000-WP6.6.1 - Unauthenticated SQL Injection
Media
CVE-2025-32650
Accessibility Suite by Online ADA <= 4.18 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2025-32616
Nimbata Call Tracking <= 1.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-32591
WP Abstracts <= 2.7.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-32681
Error Log Viewer <= 1.0.5 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2025-32565
Neon Product Designer <= 2.1.1 - Unauthenticated SQL Injection
Alta
CVE-2025-31565
WPSmartContracts <= 2.0.10 - Unauthenticated SQL Injection
Media
CVE-2025-31041
AnyTrack Affiliate Link Manager <= 1.0.4 - Missing Authorization
Alta
CVE-2025-32603
WP Online Users Stats <= 1.0.0 - Unauthenticated SQL Injection
Media
CVE-2025-32676
Verowa Connect <= 3.0.5 - Authenticated (Administrator+) SQL Injection
Media
CVE-2025-32685
WP Inquiries <= 0.2.1 - Authenticated (Administrator+) SQL Injection
Media
CVE-2025-3100
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
Alta
CVE-2025-31599
Bulk Product Sync <= 8.6 - Unauthenticated SQL Injection
Media
CVE-2024-13820
Melhor Envio <= 2.15.11 - Unauthenticated Sensitive Information Exposure via Hardcoded Hash
Media
CVE-2025-32119
CardGate Payments for WooCommerce <= 3.2.1 - Authenticated (Administrator+) SQL Injection
Media
CVE-2025-3428
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'coating_text'
Media
CVE-2025-3436
coreActivity: Activity Logging for WordPress <= 2.7 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2025-32128
Nearby Locations <= 1.1.1 - Authenticated (Administrator+) SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.