Media
CVE-2025-30806
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtros
Media
CVE-2025-30879
MC Woocommerce Wishlist <= 1.8.9 - Authenticated (Administrator+) SQL Injection
Media
CVE-2025-30784
WP Subscription Forms <= 1.2.3 - Authenticated (Contributor+) SQL Injection
Alta
CVE-2025-30886
JS Help Desk <= 2.9.2 - Unauthenticated SQL Injection
Media
CVE-2025-22783
SEO Plugin by Squirrly SEO <= 12.4.03 - Authenticated (Contributor+) SQL Injection
Alta
CVE-2025-26898
Traveler <= 3.2.0 - Unauthenticated SQL Injection
Crítica
CVE-2025-30622
postMash Custom – custom post order <= 1.0.3 - Unauthenticated SQL Injection
Media
CVE-2025-30765
FlexStock <= 3.13.1 - Authenticated (Administrator+) SQL Injection
Media
CVE-2025-30562
Navigation Tree Elementor <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2025-30524
Product Catalog – Catalog for WordPress <= 1.0.4 - Unauthenticated SQL Injection
Media
CVE-2025-2228
Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.8 - Authenticated (Contributor+) Sensitive Information Exposure
Media
CVE-2025-30523
Super Simple Subscriptions <= 1.1.0 - Authenticated (Administrator+) SQL Injection
Media
CVE-2025-28873
Shuffle <= 0.5 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2025-30525
WP Profitshare <= 1.4.9 - Authenticated (Editor+) SQL Injection
Media
CVE-2025-2252
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.3.6.1 - Unauthenticated Private Post Title Disclosure
Media
CVE-2025-30604
JiangQie Official Website Mini Program <= 1.8.2 - Authenticated (Administrator+) SQL Injection
Alta
CVE-2025-28898
WP Multistore Locator <= 2.5.2 - Unauthenticated SQL Injection
Media
CVE-2025-30571
STEdb Forms <= 1.0.4 - Authenticated (Administrator+) SQL Injection
Media
CVE-2025-30570
دکمه، شبکه اجتماعی خرید <= 2.0.6 - Authenticated (Administrator+) SQL Injection
Media
CVE-2025-30609
AppExperts <= 1.4.3 - Unauthenticated Sensitive Information Exposure
Media
CVE-2025-30590
Flickr set slideshows <= 0.9 - Authenticated (Contributor+) SQL Injection
Alta
CVE-2025-28904
Web Directory Free <= 1.7.6 - Unauthenticated SQL Injection
Media
CVE-2025-30583
Pro Rank Tracker <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2025-30569
WP Featured Entries <= 1.0 - Authenticated (Contributor+) SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.