Media
5c7edfad-b45b-4297-876d-a063e02af0bf
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2022-46851
Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 3.1.20 - Cross-Site Request Forgery in add_to_favorite
Media
CVE-2023-23820
ProfilePress <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Media
CVE-2023-23785
Exquisite PayPal Donation <= v2.0.0 - Authenticated(Admin+) Stored Cross-Site Scripting
Media
CVE-2022-4652
Video Background <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-23816
Sitemap Index <= 1.2.3 - Authenticated(Admin+) Stored Cross-Site Scripting
Media
CVE-2023-23887
Easy Google Analytics for WordPress <= 1.6.0 - Cross-Site Request Forgery
Media
37b5fcfd-654b-4151-9494-551799464c7c
Contextual Related Posts <= 3.3.1 - Missing Authorization in crp_ajax_clearcache
Alta
CVE-2023-26326
BuddyForms <= 2.7.7 - PHAR Deserialization
Crítica
CVE-2023-25699
Live Streaming - Broadcast Live Video <= 5.5.15 - Missing Authorization to Unauthenticated Remote Code Execution
Media
CVE-2022-47422
Accept Stripe Donation – AidWP <= 3.1.5 - Cross Site Request Forgery
Media
CVE-2023-23806
WordPress Custom Settings <= 1.0 - Authenticated(Admin+) Stored Cross-Site Scripting
Alta
CVE-2023-25986
PayGreen – Ancienne version <= 4.10.2 - Cross-Site Request Forgery
Media
CVE-2022-38063
Social Login WP <= 5.0.0.0 - Cross-Site Request Forgery
Media
CVE-2023-25993
Top 10 – Popular posts plugin for WordPress <= 3.2.3 - Missing Authorization on tptn_ajax_clearcache
Baja
CVE-2023-23814
CP Multi View Event Calendar <= 1.4.13 - Insufficient Authorization
Media
CVE-2023-25991
RegistrationMagic <= 5.1.9.2 - Cross-Site Request Forgery leading to Form Metadata Deletion
Media
f0c7324f-4c22-44e0-8d2a-9b95fd89467d
vSlider Multi Image Slider <= 4.1.2 - Missing Authorization
Alta
CVE-2023-0895
WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection
Media
CVE-2023-23817
Simple PDF Viewer <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via googlepdf Shortcode
Media
CVE-2023-23717
Portfolio Slideshow <= 1.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-23827
Google Maps v3 Shortcode <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2022-40203
Advanced Dynamic Pricing for WooCommerce <= 4.1.5 - Missing Authorization in ajaxCalculateSeveralProducts function
Alta
CVE-2023-0279
Media Library Assistant <= 3.05 - Authenticated (Administrator+) SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.