Crítica
CVE-2023-4922
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Media
CVE-2023-5658
WP MapIt <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Alta
CVE-2023-5620
Webpushr <= 4.34.0 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
Media
CVE-2023-5737
WordPress Backup & Migration <= 1.4.3 - Missing Authorization to Settings Update
Media
CVE-2023-5641
Martins Free & Easy SEO BackLink Link Building Network <= 1.2.29 - Reflected Cross-Site Scripting via _wpnonce
Media
CVE-2023-51396
Brizy <= 2.4.29 - Cross-Site Scripting
Media
CVE-2023-5239
Security & Malware scan by CleanTalk <= 2.120 - IP Spoofing to Protection Mechanism Bypass
Media
CVE-2023-5209
WordPress Online Booking and Scheduling Plugin – Bookly <= 22.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2023-5325
Woocommerce Vietnam Checkout <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2023-5506
ImageMapper <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page/Post Deletion via imgmap_delete_area_ajax
Media
CVE-2023-5577
Bitly's WordPress Plugin <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-47666
Code Snippets <= 3.5.0 - Cross-Site Request Forgery via load
Media
CVE-2023-5525
Limit Login Attempts Reloaded <= 2.25.25 - Missing Authorization
Media
CVE-2023-5669
Featured Image Caption <= 0.8.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-5743
Telephone Number Linker <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-4642
kk Star Ratings <= 5.4.5 - Race Condition to Multiple User Voting
Baja
CVE-2023-6160
LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion
Media
CVE-2023-47231
ShortCodes UI <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2022-47181
Email Templates <= 1.4.2 - Cross-Site Request Forgery via send_test_email
Media
e881ba2f-0e88-4c7b-aa0d-84e816019db9
Product Catalog Mode For Woocommerce <= 5.0.2 - Missing Authorization
Alta
CVE-2023-47224
WP Travel <= 7.7.0 - Missing Authorization via Multiple AJAX Actions
Media
CVE-2023-47239
Easy PayPal Shopping Cart <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-47229
Download Top 25 Social Icons <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-47225
Short URL <= 1.6.8 - Missing Authorization via multiple AJAX functions
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.