Media
CVE-2023-1080
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2023-25961
Darcie <= 1.1.5 - Reflected Cross-Site Scripting via JS split
Alta
CVE-2023-23700
OceanWP <= 3.4.1 - Authenticated (Subscriber+) Local File Inclusion
Media
CVE-2023-26519
Publish to Schedule <= 4.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2023-0940
ProfileGrid <= 5.3.0 - Missing Authorization to Arbitrary Password Reset
Media
CVE-2023-26517
Dashboard Widgets Suite <= 3.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-0890
Shortcodes Ultimate <= 5.12.7 - Authenticated (Subscriber+) Arbitrary Post Access via Shortcode
Media
CVE-2023-25964
We’re Open! <= 1.46 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-22693
WP Google Tag Manager <= 1.1 - Cross-Site Request Forgery
Media
CVE-2023-0911
Shortcodes Ultimate <= 5.12.7 - Authenticated (Subscriber+) Information Exposure
Crítica
CVE-2023-26540
Houzez <= 2.7.1 - Privilege Escalation
Media
CVE-2023-1068
Download Read More Excerpt Link <= 1.6.0 - Cross-Site Request Forgery to Settings Update
Media
CVE-2023-24008
Maspik – Spam blacklist <= 0.7.8 - Cross-Site Request Forgery
Media
CVE-2023-25983
KB Support <= 1.5.84 - Authenticated (Subscriber+) CSV Injection
Media
CVE-2023-25959
Apollo13 Framework Extensions <= 1.8.10 - Missing Authorization
Alta
CVE-2022-45364
Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.6.5 - Cross-Site Request Forgery in dnd_upload_cf7_upload and dnd_codedropz_upload_delete
Media
CVE-2023-26541
asMember <= 1.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-1023
WP Meta SEO <= 4.5.3 - Missing Authorization in 'saveSitemapSettings'
Media
CVE-2023-1026
WP Meta SEO <= 4.5.3 - Missing Authorization in 'listPostsCategory'
Media
CVE-2022-45070
Conditional Checkout Fields & Edit Checkout Fields for WooCommerce <= 1.2.3 - Missing Authorization
Media
CVE-2023-1029
WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps'
Media
CVE-2023-26531
多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 <= 4.2.5 - Cross-Site Request Forgery
Media
CVE-2023-1022
WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation'
Media
CVE-2023-1028
WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'setIgnore'
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.