Media
CVE-2024-34382
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtros
Alta
CVE-2024-1173
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (AccountingManager+) SQL Injection
Alta
CVE-2024-2661
Barcode Scanner with Inventory & Order Manager <= 1.5.4 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2024-2109
Booster Extension <= 1.2.0 - Basic Information Exposure via booster_extension_authorbox_shortcode_display
Media
CVE-2024-1809
Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) <= 5.2.3 - Missing Authorization
Media
CVE-2026-15287
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subscriber+) SQL Injection
Crítica
CVE-2024-33911
School Management Pro <= 10.3.4 - Authenticated (School Admin+) SQL Injection
Media
CVE-2024-3717
Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.7.7 - Sensitive Information Exposure
Alta
CVE-2024-2831
Calendar <= 1.3.14 - Authenticated (Contributor+) SQL Injection via Shortcode
Media
CVE-2024-30241
ProfileGrid <= 5.7.1 - Authenticated (Contributor+) SQL Injection
Alta
CVE-2024-1797
WP ULike – Most Advanced WordPress Marketing Toolkit <= 4.6.9 - Authenticated (Contributor+) SQL Injection via Shortcodes
Media
CVE-2024-3870
Contact Form 7 Database Addon – CFDB7 <= 1.2.6.8 - Unauthenticated Sensitive Information Exposure
Crítica
CVE-2024-3342
Timetable and Event Schedule by MotoPress <= 2.4.11 - Authenticated (Contributor+) SQL Injection
Media
CVE-2024-1584
Analytify <= 5.2.1 - Missing Authorization to Unauthenticated Google Analytics Tracking ID Modification
Crítica
CVE-2024-3060
ENL Newsletter <= 1.0.1 - Authenticated (Admin+) SQL Injection
Alta
CVE-2024-1789
WP SMTP 1.2 - 1.2.6 - Authenticated (Admin+) SQL Injection
Crítica
CVE-2024-33546
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.10 - Authenticated (Subscriber+) SQL Injection
Crítica
CVE-2024-33544
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.10 - Unauthenticated SQL Injection
Media
CVE-2024-3682
WP STAGING <= 3.4.3 and WP STAGING Pro <= 5.4.3 - Sensitive Information Exposure via Log File
Crítica
CVE-2024-33559
XStore <= 9.3.8 - Unauthenticated SQL Injection
Media
CVE-2024-33575
User Meta <= 3.0 - Unauthenticated Sensitive Information Exposure
Crítica
CVE-2024-33551
XStore Core <= 5.3.8 - Unauthenticated SQL Injection
Media
CVE-2024-3733
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Information Exposure
Media
CVE-2024-32816
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.78 - Unauthenticated Sensitive Information Exposure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.