Media
CVE-2023-27454
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2023-23677
GTmetrix for WordPress <= 0.4.5 - Reflected Cross-Site Scripting via 'url'
Media
c35bffb2-f805-48d6-938a-cb5142eac3b1
Fontiran <= 2.1 - Cross-Site Request Forgery
Media
c0e58807-bccc-469f-82c3-a4bbf088a626
Yoast SEO <= 20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2023-26525
Dokan <= 3.7.12 - Authenticated (Vendor+) SQL Injection
Media
CVE-2022-46799
Easy Testimonial Slider and Form <= 1.0.15 - Unauthenticated Reflected Cross-Site Scripting via search_term
Media
CVE-2023-24400
Cookie Notice & Compliance for GDPR / CCPA <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cookies_policy_link' Shortcodes
Media
CVE-2023-1155
Cost Calculator <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
701bf711-d692-4eb1-8459-befa62264b97
Fontiran <= 2.1 - Cross-Site Request Forgery
Media
CVE-2023-27451
Instant Images <= 5.1.0.1 - Authenticated (Author+) Server-Side Request Forgery via instant_images_download
Media
CVE-2023-0085
Metform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypass
Media
CVE-2023-27443
Simple Vimeo Shortcode <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Media
CVE-2022-47152
ClickFunnels <= 3.1.1 - Cross-Site Request Forgery to Settings Update
Media
CVE-2023-27447
WP SMS <= 6.0.4 - Information Disclosure via REST API
Media
CVE-2023-27457
Add Expires Headers & Optimized Minify <= 2.7 - Cross-Site Request Forgery via [placeholder]
Media
CVE-2023-27452
Button Generator – easily Button Builder <= 2.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2023-27453
LWS Tools <= 2.3.1 - Cross-Site Request Forgery
Media
CVE-2022-42882
Simple CSV/XLS Exporter <= 1.5.8 - CSV Injection
Media
CVE-2023-27446
DeepL Pro API translation <= 2.1.4 - Cross-Site Request Forgery via saveSettings
Media
CVE-2023-27458
WpStream – Live Streaming, Video on Demand, Pay Per View <= 4.4.10 - Cross-Site Request Forgery via wpstream_settings
Media
CVE-2023-27456
Total Theme <= 2.1.19 - Authenticated(Subscriber+) Plugin Activation
Media
CVE-2023-0395
menu shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-27461
When Last Login <= 1.2.1 - Cross-Site Request Forgery via wll_hide_subscription_notice
Alta
CVE-2023-0441
Gallery Blocks with Lightbox <= 3.0.7 - Missing Authorization in pgc_sgb_action_wizard
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.