Alta
CVE-2025-8020
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.749
Alta
CVE-2025-8022
bun vulnerable to OS Command Injection
Media
CVE-2025-52734
CropRefine <= 1.2.1 - Reflected Cross-Site Scripting
Media
CVE-2025-50053
Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Reflected Cross-Site Scripting
Crítica
CVE-2025-6715
LatePoint <= 5.1.93 - Unauthenticated Local File Inclusion
Alta
CVE-2025-48171
Cena Store <= 2.11.26 - Unauthenticated Local File Inclusion
Media
CVE-2025-53201
Jobmonster <= 4.7.8 - Reflected Cross-Site Scripting
Media
CVE-2025-53559
Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Reflected Cross-Site Scripting
Media
CVE-2025-48159
Youtube Vimeo Video Player and Slider WP Plugin <= 3.8 - Reflected Cross-Site Scripting
Media
CVE-2025-54056
Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Reflected Cross-Site Scripting
Media
CVE-2025-52788
CaptionPix <= 1.8 - Reflected Cross-Site Scripting
Media
CVE-2025-8009
Security Ninja – Secure Firewall & Secure Malware Scanner - 5.201 - 5.242 - Authenticated (Administrator+) Arbitrary File Read
Crítica
CVE-2025-8047
Multiple Plugins by itayamar - Backdoored Software
Alta
CVE-2025-49924
Wholesale Suite <= 2.2.4.2 - Authenticated (Shop Manager+) Privilege Escalation
Media
CVE-2025-48162
Simple Business Directory Pro <= 15.5.1 - Reflected Cross-Site Scripting
Media
CVE-2025-47689
Video Blogster Lite <= 1.2 - Reflected Cross-Site Scripting
Media
CVE-2025-4968
WPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder Elements
Alta
CVE-2025-25172
VidMov <= 1.9.4 - Unauthenticated Local File Inclusion
Media
CVE-2025-54027
Support Board <= 3.8.0 - Reflected Cross-Site Scripting
Sin evaluar
830
rsdirectory
Media
CVE-2025-51481
Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the not
Alta
CVE-2024-5187
onnx allows Arbitrary File Overwrite in download_model_with_test_data
Media
CVE-2025-5818
Featured Image Plus – Quick & Bulk Edit with Unsplash <= 1.6.6 - Authenticated (Admin+) Server-Side Request Forgery
Alta
CVE-2025-7722
Social Streams <= 1.2.1 - Authenticated (Subscriber+) Privilege Escalation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.