Media
CVE-2023-46775
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2023-5799
WP Hotel Booking <= 2.0.8 - Insufficient Authorization to Unauthorized Post Deletion
Media
CVE-2023-46779
EasyRecipe <= 3.5.3251 - Cross-Site Request Forgery
Media
CVE-2023-5774
Animated Counters <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Alta
CVE-2023-5815
News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Remote Code Execution via Local File Inclusion
Media
CVE-2023-46634
Custom My Account for Woocommerce <= 2.1 - Cross-Site Request Forgery
Media
CVE-2023-46633
Glossary <= 3.1.2 - Missing Authorization
Alta
f1cbe675-4c0f-430a-b2db-85ba8605d172
Deeper Comments <= 2.1.1 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Options Update
Media
CVE-2023-46631
Product Recommendation Quiz for eCommerce <= 2.1.0 - Missing Authorization in prq_set_token
Media
CVE-2023-40681
Groundhogg <= 2.7.11.10 - Authenticated (Administrator+) Stored Cross-Site Scripting via Task Data
Media
CVE-2023-46618
Category SEO Meta Tags <= 2.5 - Cross-Site Request Forgery via csmt_admin_options
Media
CVE-2023-46638
WCP OpenWeather <= 2.5.0 - Cross-Site Request Forgery
Media
d3343d96-ca52-46a6-b464-cd2e5375d10f
Fathom Analytics <= 3.0.7 - Authenticated(Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-46622
WPPizza <= 3.18.2 - Reflected Cross-Site Scripting
Media
CVE-2023-32298
Simple User Listing <= 1.9.2 - Reflected Cross-Site Scripting via as
Media
CVE-2023-46620
DeepL Pro API translation <= 2.4.1.1 - Cross-Site Request Forgery via wpdeepl_prune_logs
Media
CVE-2023-46626
FLOWFACT WP Connector <= 2.1.8 - Reflected Cross-Site Scripting
Media
CVE-2023-47230
Contact Forms by Cimatti <= 1.6.0 - Cross-Site Request Forgery via accua_forms_list_page_table
Media
CVE-2023-46619
Spider Facebook <= 1.0.15 - Cross-Site Request Forgery
Media
CVE-2023-46644
WordPress CTA <= 1.5.8 - Missing Authorization via Multiple AJAX Actions
Media
CVE-2023-46624
Parcel Pro <= 1.6.11 - Open Redirect via 'redirect'
Media
CVE-2023-5314
WP EXtra <= 6.2 - Missing Authorization to Arbitrary Email Sending
Media
CVE-2023-46635
YITH WooCommerce Product Add-Ons <= 4.2.0 - Missing Authorization
Media
CVE-2023-32299
Ni WooCommerce Sales Report <= 3.7.3 - Missing Authorization via ajax_sales_order
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.