Alta
CVE-2024-3112
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2024-6023
ContentLock <= 1.0.3 - Cross-Site Request Forgery to Email Adding
Media
CVE-2024-37218
Page Builder Sandwich – Front-End Page Builder <= 5.1.0 - Missing Authorization
Alta
CVE-2024-37234
Academy LMS <= 2.0.10 - Open Redirect
Media
CVE-2024-37223
Restaurant Reservations <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-2484
Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets
Media
CVE-2024-2430
Website Content in Page or Post <= 2024.03.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-37220
Optinly <= 1.0.18 - Missing Authorization
Media
CVE-2024-0974
Social Media Widget <= 4.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-6024
ContentLock <= 1.0.3 - Cross-Site Request Forgery to Group/Email Deletion
Crítica
CVE-2024-6027
Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter
Media
CVE-2024-5859
Appointment Booking and Online Scheduling <= 4.4.2 - Reflected Cross-Site Scripting
Crítica
CVE-2024-5756
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin
Media
CVE-2024-3961
ConvertKit <= 2.4.9 - Missing Authorization
Media
CVE-2024-5344
The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget
Alta
CVE-2024-5503
WP Blog Post Layouts <= 1.1.3 - Authenticated (Contributor+) Local File Inlcusion
Media
CVE-2024-37110
WishList Member X < 3.26.7 - Missing Authorization to Information Disclosure
Media
CVE-2024-37205
affiliate-toolkit <= 3.4.4 - Unauthenticated Sensitive Information Exposure via Logs
Media
CVE-2024-37093
MasterStudy LMS <= 3.2.1 - Cross-Site Request Forgery
Alta
CVE-2024-37107
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Privilege Escalation
Media
CVE-2023-3352
Smush – Lazy Load Images, Optimize & Compress Images <= 3.16.4 - Missing Authorization to Resmush List Deletion
Media
CVE-2024-37222
Master Slider <= 3.10.0 - Reflected Cross-Site Scripting
Media
CVE-2022-44587
WP 2FA <= 2.6.3 - Unauthenticated Information Exposure via Log File
Crítica
CVE-2024-37109
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Remote Code Execution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.