Media
CVE-2025-13676
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2025-14843
Wizit Gateway for WooCommerce <= 1.3.1 - Missing Authentication to Unauthenticated Arbitrary Order Cancellation
Media
CVE-2026-1081
Set Bulk Post Categories <= 1.1 - Cross-Site Request Forgery to Bulk Post Category Update
Media
CVE-2026-1070
Alex User Counter <= 6.0 - Cross-Site Request Forgery to Settings Update
Media
CVE-2025-14985
Alpha Blocks <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alpha_block_css' Post Meta
Media
CVE-2026-1076
Star Review Manager <= 1.2.2 - Cross-Site Request Forgery to Settings Update
Media
CVE-2026-1099
Administrative Shortcodes <= 0.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'login' and 'logout' Shortcode Attributes
Alta
CVE-2026-1257
Administrative Shortcodes <= 0.3.4 - Authenticated (Contributor+) Local File Inclusion via 'slug' Shortcode Attribute
Alta
CVE-2026-0807
Frontis Blocks <= 1.1.6 - Unauthenticated Server-Side Request Forgery via 'url' Parameter
Media
CVE-2026-1084
Cookie consent for developers <= 1.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Multiple Settings Fields
Media
CVE-2026-1075
ZT Captcha <= 1.0.4 - Cross-Site Request Forgery to Settings Update
Media
CVE-2026-1103
AIKTP <= 5.0.04 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions
Media
CVE-2025-14609
Wise Analytics <= 1.1.9 - Missing Authorization to Unauthenticated Arbitrary Analytics Database Disclosure via 'name' Parameter
Media
CVE-2025-14906
WP Youtube Video Gallery <= 1.0 - Cross-Site Request Forgery to Plugin Settings Update
Media
CVE-2025-14629
Alchemist Ajax Upload <= 1.1 - Missing Authorization to Unauthenticated Arbitrary Media File Deletion
Media
CVE-2025-14797
Same Category Posts <= 1.1.19 - Authenticated (Author+) Stored Cross-Site Scripting via Widget Title Placeholder
Media
CVE-2025-14903
Simple Crypto Shortcodes <= 1.0.2 - Cross-Site Request Forgery to Plugin Settings Update
Media
CVE-2025-12836
VK Google Job Posting Manager <= 1.2.23 - Authenticated (Author+) Stored Cross-Site Scripting via Job Description Field
Crítica
CVE-2025-13374
Kalrav AI Agent <= 2.3.8 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX Action
Media
CVE-2025-71177
LavaLite CMS affected by a stored cross-site scripting vulnerability
Media
CVE-2026-24128
XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages
Alta
CVE-2026-0603
Hibernate vulnerable to SQL Injection
Alta
CVE-2025-67847
Moodle affected by a code injection vulnerability
Media
CVE-2026-24549
GeoDirectory <= 2.8.149 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.