Alta
CVE-2025-60059
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Alta
CVE-2025-60048
Tripster <= 1.0.10 - Unauthenticated Local File Inclusion
Alta
CVE-2025-49374
Captcha.eu <= 1.0.61 - Unauthenticated Server-Side Request Forgery
Alta
CVE-2025-60056
Winger <= 1.0.16 - Unauthenticated Local File Inclusion
Alta
CVE-2025-60060
Pubzinne <= 1.0.12 - Unauthenticated Local File Inclusion
Alta
CVE-2025-58943
Agricola <= 1.1.0 - Unauthenticated Local File Inclusion
Alta
CVE-2025-58941
Fabric <= 1.5.0 - Unauthenticated Local File Inclusion
Alta
CVE-2025-54750
Funnel Builder by FunnelKit <= 3.11.1 - Unauthenticated Local File Inclusion
Alta
CVE-2025-60055
Fabrica <= 1.8.1 - Unauthenticated Local File Inclusion
Alta
CVE-2025-60051
Rare Radio <= 1.0.15.1 - Unauthenticated Local File Inclusion
Alta
CVE-2025-8889
Compress Then Upload <= 1.0.4 - Authenticated (Admin+) Arbitrary File Upload
Alta
CVE-2025-60061
Kicker <= 2.2.0 - Unauthenticated Local File Inclusion
Alta
CVE-2025-58940
Basil <= 1.3.12 - Unauthenticated Local File Inclusion
Alta
CVE-2025-60049
Soleil <= 1.17 - Unauthenticated Local File Inclusion
Media
CVE-2025-8357
Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion
Alta
CVE-2025-8085
Ditty <= 3.1.57 - Unauthenticated Server-Side Request Forgery
Alta
CVE-2025-64230
Filr <= 1.2.10 - Authenticated (Contributor+) Arbitrary File Deletion
Alta
CVE-2025-49895
ServerBuddy by PluginBuddy.com <= 1.0.5 - Cross-Site Request Forgery to PHP Object Injection
Media
CVE-2025-7499
BetterDocs <= 4.1.1 - Missing Authorization to Private And Password-Protected Posts Information Disclosure
Alta
CVE-2025-6079
School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload
Alta
CVE-2025-3671
WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update
Crítica
CVE-2025-7441
StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload
Media
CVE-2024-8393
Woocommerce Blocks – Woolook <= 1.7.0 - Authenticated (Admin+) Local File Inclusion
Alta
CVE-2025-8142
Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.