Mittel
CVE-2024-35719
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.587
Mittel
CVE-2024-5607
GDPR CCPA Compliance & Cookie Consent Banner <= 2.7.0 - Missing Authorization to Settings Update and Stored Cross-Site Scripting
Mittel
CVE-2024-35730
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.3 - Reflected Cross-Site Scripting
Mittel
CVE-2024-35721
Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery <= 1.4.5 - Missing Authorization
Mittel
CVE-2024-35743
SC filechecker <= 0.6 - Authenticated (Admin+) Arbitrary File Deletion
Mittel
CVE-2024-35722
Slider Responsive Slideshow – Image slider, Gallery slideshow <= 1.4.0 - Missing Authorization
Mittel
CVE-2024-35752
Stellissimo Text Box <= 1.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2024-4703
One Page Express Companion <= 1.6.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via one_page_express_contact_form Shortcode
Mittel
CVE-2024-35692
GDPR/CCPA Cookie Consent Banner <= 3.2 - Missing Authorization via handle_consent_toggle()
Mittel
CVE-2023-6876
Clever Fox – One Click Website Importer by Nayra Themes <= 25.2.0 - Missing Authorization to arbitrary theme activation via clever-fox-activate-theme
Mittel
CVE-2024-35725
LA-Studio Element Kit for Elementor <= 1.3.6 - Missing Authorization
Mittel
CVE-2024-35689
Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) <= 5.2.3 - Cross-Site Request Forgery
Mittel
CVE-2024-35740
Pixgraphy <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-35712
Database Cleaner <= 1.0.5 - Authenticated (Admin+) Arbitrary File Read
Mittel
CVE-2024-35696
WP Docs <= 2.1.3 - Reflected Cross-Site Scripting
Kritisch
CVE-2024-35750
Gallery – Image and Video Gallery with Thumbnails <= 2.0.3 - Authenticated (Contributor+) SQL Injection
Mittel
CVE-2024-4354
TablePress – Tables in WordPress made easy <= 2.3 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind
Mittel
CVE-2024-35727
Extra Product Options for WooCommerce <= 3.0.6 - Missing Authorization
Mittel
CVE-2024-34765
Sensei Pro (WC Paid Courses) <= 4.23.1.1.23.1 - Authenticated (Student+) Stored Cross-Site Scripting
Mittel
CVE-2024-35726
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.19 - Missing Authorization
Mittel
CVE-2024-3987
WP Mobile Menu – The Mobile-Friendly Responsive Menu <= 2.8.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Alt
Hoch
CVE-2024-5599
FileOrganizer <= 1.0.7 - Sensitive Information Exposure via Directory Listing
Mittel
CVE-2024-35707
Heateor Social Login WordPress <= 1.1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-35753
TemplatesNext OnePager <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.