Mittel
CVE-2024-30559
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.445
Mittel
CVE-2024-2140
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widget
Mittel
CVE-2024-1051
List category posts <= 0.89.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kritisch
CVE-2024-2086
Integrate Google Drive <= 1.3.8 - Missing Authorization to Unauthenticated Settings Modification and Export
Mittel
CVE-2024-2847
WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Kritisch
CVE-2024-31116
10Web Map Builder for Google Maps <= 1.0.74 - Authenticated (Administrator+) SQL Injection
Mittel
CVE-2024-31086
Change default login logo,url and title <= 2.0 - Cross-Site Request Forgery
Mittel
CVE-2024-31099
Shortcodes and extra features for Phlox theme <= 2.15.8 - Missing Authorization
Kritisch
CVE-2024-31114
Shortcode Addons <= 3.2.5 - Authenticated (Admin+) Arbitrary File Upload
Mittel
CVE-2024-30557
Aesop Story Engine <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-31091
Custom Field Bulk Editor <= 1.9.1 - Reflected Cross-Site Scripting
Mittel
CVE-2024-2142
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Table Widget
Mittel
CVE-2024-31098
New Order Notification for Woocommerce <= 2.0.2 - Missing Authorization
Mittel
CVE-2024-31101
AI Twitter Feeds (Twitter widget & shortcode) <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-30544
Whizzy <= 1.1.18 - Missing Authorization
Mittel
CVE-2024-2794
Gutenberg Block Editor Toolkit – EditorsKit <= 1.40.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hoch
CVE-2024-31094
Filter Custom Fields & Taxonomies Light <= 1.05 - Authenticated (Contributor+) PHP Object Injection
Mittel
CVE-2024-30555
Ultimate Social Comments – Email Notification & Lazy Load <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-2974
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure
Mittel
CVE-2024-31108
iFlyChat – WordPress Chat <= 4.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-31089
Platinum SEO <= 2.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Mittel
CVE-2024-30529
Tainacan <= 0.20.7 - Missing Authorization
Mittel
CVE-2024-31090
Hacklog Down As PDF <= 2.3.6 - Reflected Cross-Site Scripting
Mittel
CVE-2024-31117
WooCommerce Bookings Calendar <= 1.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.