Media
CVE-2024-4758
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Crítica
CVE-2024-35677
MegaMenu <= 2.3.12 - Unauthenticated Local File Inclusion
Media
CVE-2024-4957
Frontend Checklist <= 2.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-2017
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.7.8 - Missing Authorization to Authenticated (Subscriber+) PHP Object Injection
Media
CVE-2024-4959
Frontend Checklist <= 2.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Items
Media
CVE-2024-35675
Advanced Woo Labels – Product Labels for WooCommerce <= 1.93 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2024-35678
Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress <= 1.7.2 - Authenticated (Author+) SQL Injection
Media
CVE-2024-35673
Pure Chat – Live Chat Plugin & More! <= 2.22 - Cross-Site Request Forgery
Media
CVE-2024-6718
PVN Auth Popup <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2024-5071
Bookster – WordPress Appointment Booking Plugin <= 1.1.0 - Unauthenticated Appointment Manipulation
Media
CVE-2024-35674
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Information Exposure
Media
CVE-2024-35676
Recurring PayPal Donations <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2024-4704
Contact Form 7 <= 5.9.4 - Unauthenticated Open Redirect
Alta
CVE-2023-6966
The Moneytizer <= 9.6.3 - Missing Authorization via multiple AJAX actions
Media
CVE-2024-3633
WebP & SVG Support <= 1.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Media
CVE-2024-5188
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-6712
MapFig Studio <= 0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2024-4194
Album and Image Gallery plus Lightbox <= 2.0 - Unauthenticated Arbitrary Shortcode Execution
Media
CVE-2024-6713
PVN Auth Popup <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2023-6956
EasyAzon – Amazon Associates Affiliate Plugin <= 5.1.0 - Reflected Cross-Site Scripting via easyazon-cloaking-locale
Media
CVE-2024-5573
Easy Table of Contents <= 2.0.65 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2024-6668
ProfilePro <= 1.3 - Authenticated (Subscriber+) Stored Cross Site Scripting
Media
CVE-2024-5169
Video Widget <= 1.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-5199
Spotify Play Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.