Alta
CVE-2024-6467
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Alta
CVE-2024-38768
The Pack Elementor addons (Header Footer & WooCommerce Builder, Template Library) <= 2.0.8.6 - Authenticated (contributor+) Local File Inclusion
Media
CVE-2024-5852
WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal
Crítica
CVE-2024-38736
Realtyna Organic IDX plugin <= 4.14.13 - Authenticated (Admin+) Arbitrary File Upload
Media
CVE-2024-38723
JSON Content Importer <= 1.5.6 - Authenticated (Contributor+) Server-Side Request Forgery
Alta
CVE-2024-38716
Events Calendar for Google <= 2.1.0 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2024-38709
GD Rating System <= 3.6 - Authenticated (Contributor+) Local File Inclusion
Crítica
CVE-2024-38734
Import Spreadsheets from Microsoft Excel <= 10.1.4 - Authenticated (Editor+) Arbitrary File Upload
Media
CVE-2024-38758
WappPress <= 6.0.4 - Authenticated (Subscriber+) Server-Side Request Forgery
Media
CVE-2024-38746
MakeStories (for Google Web Stories) <= 3.0.3 - Authenticated (Subscriber+) Arbitrary File Download and Server-Side Request Forgery
Media
CVE-2024-38730
Magical Addons For Elementor <= 1.1.41 - Authenticated (Subscriber+) Server-Side Request Forgery
Media
CVE-2024-38728
Seraphinite Post .DOCX Source <= 2.16.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Crítica
CVE-2024-38717
Booking Ultra Pro <= 1.1.13 - Unauthenticated Local File Inclusion
Alta
CVE-2024-38715
ExS Widgets <= 0.3.1 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2024-38704
WordPress Team Manager <= 2.1.12 - Authenticated (Contributor+) Local File Inclusion
Crítica
CVE-2024-38735
Event post <= 5.9.5 - Unauthenticated Local File Inclusion
Alta
CVE-2024-37942
BerqWP <= 1.7.5 - Unauthenticated Server-Side Request Forgery
Crítica
CVE-2024-37932
Woocommerce OpenPos <= 6.4.4 - Unauthenticated Arbitrary File Deletion
Alta
CVE-2024-5807
Business Card <= 1.0.0 - Authenticated (Admin+) Arbitrary File Uplaod
Crítica
CVE-2024-37928
Jobmonster < 4.7.5 - Unauthenticated Arbitrary File Deletion
Alta
CVE-2024-5456
Panda Video <= 1.4.0 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2024-6069
Pie Register - Basic <= 3.8.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
Alta
CVE-2024-6320
ScrollTo Top <= 1.2.2 - Cross-Site Request Forgery to Arbitrary File Upload
Alta
CVE-2024-6321
ScrollTo Bottom <= 1.1.1 - Cross-Site Request Forgery to Arbitrary File Upload
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.