Media
CVE-2023-27439
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2023-27434
Classic Editor and Classic Widgets <= 1.2.5 - Cross-Site Request Forgery via render_settings_page
Media
CVE-2023-27441
New Adman <= 1.6.8 - Cross-Site Request Forgery via plugin_menu
Media
CVE-2022-40699
Yet Another Stars Rating <= 3.1.2 - Authenticated (Subscriber+) Cross-Site Scripting via Shortcodes
Media
CVE-2023-27438
WP Translitera <= p1.2.5 - Cross-Site Request Forgery
Media
CVE-2023-27442
Leyka <= 3.29.2 - Cross-Site Request Forgery
Media
CVE-2023-25451
CPO Content Types <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2023-27432
Manage Upload Limit <= 1.0.4 - Reflected Cross-Site Scripting via upload_limit
Media
CVE-2023-25034
WP Clean Up <= 1.2.3 - Cross-Site Request Forgery via wp_clean_up_optimize
Media
CVE-2023-25021
FareHarbor for WordPress <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Baja
CVE-2023-0219
FluentSMTP <= 2.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via Email Logs
Media
CVE-2023-0844
Namaste! LMS <= 2.5.9.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'accept_other_payment_methods', 'other_payment_methods' Parameters
Media
CVE-2023-27449
Total Poll Lite <= 4.8.6 - Cross-Site Request Forgery
Media
CVE-2023-25467
Resize at Upload Plus <= 1.3 - Cross-Site Request Forgery
Media
CVE-2023-0968
Watu Quiz <= 3.3.9 - Reflected Cross-Site Scripting
Media
CVE-2023-25474
About Me 3000 widget <= 2.2.6 - Cross-Site Request Forgery to Plugin Settings Update
Alta
CVE-2023-27450
Leyka <= 3.29.2 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2023-27445
Blog Floating Button <= 1.4.12 - Cross-Site Request Forgery
Media
2b335807-f4d1-43b3-9e1b-2215eb00a3f8
WP Meteor Page Speed Optimization Topping <= 3.1.4 -Missing Authorization to Notice Dismissal
Media
CVE-2023-0491
Schedulicity - Easy Online Scheduling <= 2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Alta
CVE-2023-27440
Types <= 3.4.17 - Authenticated (Administrator+) Arbitrary File Upload
Media
CVE-2022-38141
Sales Report Email for WooCommerce <= 2.8.0 - Missing Authorization for Email Functionality
Media
CVE-2023-25491
JCH Optimize <= 3.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Media
CVE-2022-47449
Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD <= 3.1.5 - Reflected Cross-Site Scripting via cart_search
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.