Crítica
d7f024c5-80d8-490f-b448-9bccb877024b
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtros
Alta
CVE-2022-33960
Social Share Buttons by Supsystic <= 2.2.3 - Authenticated (Subscriber+) SQL Injection
Alta
1f9d8bbe-205f-44b6-a0c6-89b9135e6363
Contest Gallery – Files Upload and Contest Plugin for WordPress <= 17.0.4 - Admin+ SQL Injection
Alta
b1c27c27-f597-4867-a8d8-a83a3a1bf5f6
PPC Tracker WordPress <= 2.0 - Stored Cross-Site Scripting via IP
Media
635e02a8-42f3-4098-aa3e-839099f40bfb
Restaurant Reservations <= 1.7 - SQL Injection
Crítica
CVE-2022-1905
Events Made Easy <= 2.2.80 - SQL Injection
Alta
c906a988-ad45-49cc-9d77-6b501445ddc5
Gallery for Social Photo <= 1.0.0.25 - Subscriber+ SQL Injection
Alta
005234f9-8ae2-455a-8dcd-5d29a6051270
Image Slider <= 1.1.119 - Subscriber+ SQL Injection
Alta
642a6d42-100f-4461-b568-35e089287902
CRM WordPress Plugin – RepairBuddy <= 3.72 - SQL Injection
Media
dacfba3e-c1d7-475c-885b-f77b77a65f91
Keyword Rank Tracker <= 1.0.7 - Stored Cross-Site Scripting
Alta
CVE-2022-1618
Coru LFMember <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2022-1436
WPCargo Track & Trace <= 6.9.4 - Reflected Cross-Site Scripting
Alta
5d762b22-5563-454f-8c1c-485a2a3a0d0f
Tracked Tweets <= 0.2.9 - Cross-Site Request Forgery to Cross-Site Scripting
Media
CVE-2022-1435
WPCargo Track & Trace <= 6.9.4 - Admin+ Stored Cross Site Scripting
Alta
CVE-2022-1407
VikBooking Hotel Booking Engine & PMS <= 1.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Alta
CVE-2021-25119
AGIL(Automatic Grid Image Listing) <= 1.0 - Arbitrary File Upload
Alta
d52d3291-838a-4b23-b969-8c6273faec1e
Product Filter For WooCommerce Product <= 1.3.1 - Unauthenticated SQL Injection
Media
CVE-2021-25002
Tipsacarrier < 1.5.0.5 - Missing Authorization to Order Disclosure
Media
7c32d967-85b9-4c93-a948-0126efb78f39
WooCommerce < 5.7.0 & WooCommerce Admin < 2.6.4 - Information Disclosure
Media
CVE-2022-0398
ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Subscriber+ Arbitrary Affiliate Links Creation
Media
CVE-2022-0634
ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Authorization Bypass and Cross-Site Request Forgery
Crítica
e08d455e-925d-4a94-8d57-484aedc25411
Tipsacarrier < 1.5.0.5 - Unauthenticated SQL Injection
Media
CVE-2021-25094
Tatsu <= 3.3.12 - Unauthenticated Remote Code Execution
Media
cda2465e-b17e-4b5c-ad86-3c3c7a354d03
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.7 - Email Address Disclosure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.