Media
CVE-2023-32505
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
6a830fb8-de5f-40c7-bb6c-464ed916b440
My WP Customize Admin/Frontend <= 1.21.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Media
CVE-2023-23880
ExactMetrics <= 7.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-32118
SALERT <= 1.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2023-32516
Menu - Ordering - Reservations <= 2.3.6 - Reflected Cross-Site Scripting via 'redirect'
Media
CVE-2023-24413
wordpress vertical image slider plugin <= 1.2.16 - Reflected Cross-Site Scripting
Media
CVE-2023-31075
Easy Hide Login <= 1.0.8 - Cross-Site Request Forgery
Media
CVE-2023-27926
VK All in One Expansion Unit <= 9.88.1.0 - Stored (Contributor+) Cross-Site Scripting in Profile Setting
Media
CVE-2023-32496
StopBadBots <= 7.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-32499
Radio Station <= 2.4.0.9 - Reflected Cross-Site Scripting
Media
CVE-2023-32504
Wise Chat <= 3.1.3 - Cross-Site Request Forgery
Media
CVE-2023-2604
Team Circle Image Slider With Lightbox <= 1.0.17 - Reflected Cross-Site Scripting
Media
CVE-2023-28367
VK All in One Expansion Unit <= 9.88.1.0 - Stored (Contributor+) Cross-Site Scripting in CTA Post
Media
CVE-2023-25459
Post Snippets <= 4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'snippet_content'
Media
CVE-2023-27925
VK Blocks <= 1.53.0.1 - Stored (Contributor+) Cross-Site Scripting in Post
Media
CVE-2023-28409
MW WP Form <= 4.4.2 - Directory Traversal via _file_upload
Media
CVE-2023-1524
Download Manager <= 3.2.70 - Insufficient Authorization to Information Disclosure
Media
CVE-2023-32512
ShortPixel Adaptive Images <= 3.7.1 - Cross-Site Request Forgery via shortpixel_ai_handle_page_action
Crítica
CVE-2023-29386
Manager for Icomoon <= 2.0 - Unauthenticated Arbitrary File Upload via 'upload'
Media
CVE-2023-28413
Snow Monkey Forms <= 5.1.1 - Directory Traversal via 'view' REST endpiont
Media
CVE-2023-1979
Web Stories for WordPress <= 1.31.0 - Insufficient Authorization
Media
CVE-2022-4537
Hide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypass
Media
CVE-2023-29385
WP Abstracts <= 2.6.1 - Reflected Cross-Site Scripting
Alta
03d8b8e7-5702-42d4-8cd9-ae3ff1a74a7e
Zero Spam for WordPress <= 5.4.4 - Authenticated(Administrator+) SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.