Media
b5639c00-f34c-45e3-8ff1-dfde7856a80e
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2022-47164
Event Manager for WooCommerce <= 3.7.7 - Cross-Site Request Forgery leading to Uninstall Form Submission
Media
CVE-2023-28420
Custom Options Plus <= 1.8.1 - Cross-Site Request Forgery via custom_options_plus_adm
Media
CVE-2023-28494
Contact Form Email <= 1.3.31 - Missing Authorization to Feedback Submission
Media
CVE-2023-23804
HT Feed <= 1.2.7 - Cross-Site Request Forgery leading to Limited Plugin Activation
Media
CVE-2023-28496
SMTP2GO <= 1.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Media
CVE-2023-28498
Hotel Booking Lite <= 4.6.0 - Cross-Site Request Forgery to Settings Update
Media
CVE-2023-28495
WP Shortcode by MyThemeShop <= 1.4.16 - Cross-Site Request Forgery
Media
CVE-2022-46866
Import External Images <= 1.4 - Cross-Site Request Forgery via external_image_import_all_ajax
Media
CVE-2022-46865
Bulk Resize Media <= 1.1 - Cross-Site Request Forgery via bulk_resize_resize_image
Media
CVE-2023-22673
Website Monetization by MageNet <= 1.0.29.1 - Cross-Site Request Forgery via admin_magenet_settings
Media
CVE-2022-4827
WP Tiles <= 1.1.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Media
CVE-2023-28490
WordPress Mortgage Calculator Estatik <= 2.0.11 - Reflected Cross-Site Scripting
Media
CVE-2023-28492
CP Multi View Event Calendar <= 1.4.10 - Missing Authentication leading to Authenticated (Subscriber+) Private Form Submission
Alta
2e329432-c404-4312-969b-42cac345637d
UpdraftPlus 1.22.14 to 1.23.2 and UpdraftPlus (Premium) 2.22.14 to 2.23.2 - Privilege Escalation via updraft_central_ajax_handler
Media
CVE-2023-28419
Force First and Last Name as Display Name <= 1.2 - Cross-Site Request Forgery
Media
CVE-2023-25055
Google XML Sitemap for Videos <= 2.6.1 - Cross-Site Request Forgery via video_sitemap_generate
Media
CVE-2022-47445
Be POPIA Compliant <= 1.2.0 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2023-28165
Backup Bank: WordPress Backup Plugin <= 4.0.28 - Missing Authorization via post_user_feedback_backup_bank
Media
CVE-2023-24395
Contact Form 7 Redirect & Thank You Page <= 1.0.3 - Cross-Site Request Forgery via cf7rl_admin_table
Media
CVE-2022-47446
Store Locator <= 3.98.7 - Cross-Site Request Forgery to Settings Update
Media
CVE-2022-47434
PB SEO Friendly Images <= 4.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2022-47437
WSB Brands <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via $logo
Media
CVE-2023-28491
Slideshow Gallery LITE <= 1.7.6 - Authenticated(Admin+) SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.