Mittel
CVE-2024-31109
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 41.456
Filter zurücksetzen
Mittel
CVE-2024-31105
Tax Rate Upload <= 2.4.5 - Reflected Cross-Site Scripting
Mittel
CVE-2024-30530
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-30561
Appointment Calendar <= 2.9.6 - Reflected Cross-Site Scripting
Hoch
CVE-2024-30551
Sticky Anything <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2024-30554
DD Rating <= 1.7.1 - Authenticated (Author+) Stored Cross-Site Scripting
Mittel
CVE-2024-30559
Spin 360 deg and 3D Model Viewer <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-2140
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widget
Mittel
CVE-2024-1051
List category posts <= 0.89.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kritisch
CVE-2024-2086
Integrate Google Drive <= 1.3.8 - Missing Authorization to Unauthenticated Settings Modification and Export
Mittel
CVE-2024-2847
WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Kritisch
CVE-2024-31116
10Web Map Builder for Google Maps <= 1.0.74 - Authenticated (Administrator+) SQL Injection
Mittel
CVE-2024-31086
Change default login logo,url and title <= 2.0 - Cross-Site Request Forgery
Mittel
CVE-2024-31099
Shortcodes and extra features for Phlox theme <= 2.15.8 - Missing Authorization
Kritisch
CVE-2024-31114
Shortcode Addons <= 3.2.5 - Authenticated (Admin+) Arbitrary File Upload
Mittel
CVE-2024-30557
Aesop Story Engine <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-31091
Custom Field Bulk Editor <= 1.9.1 - Reflected Cross-Site Scripting
Mittel
CVE-2024-2142
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Table Widget
Mittel
CVE-2024-31098
New Order Notification for Woocommerce <= 2.0.2 - Missing Authorization
Mittel
CVE-2024-31101
AI Twitter Feeds (Twitter widget & shortcode) <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-30544
Whizzy <= 1.1.18 - Missing Authorization
Mittel
CVE-2024-2794
Gutenberg Block Editor Toolkit – EditorsKit <= 1.40.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hoch
CVE-2024-31094
Filter Custom Fields & Taxonomies Light <= 1.05 - Authenticated (Contributor+) PHP Object Injection
Mittel
CVE-2024-30555
Ultimate Social Comments – Email Notification & Lazy Load <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.