Crítica
CVE-2020-7947
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2020-7948
Login by Auth0 <= 3.11.3 - Insecure Direct Object Reference
Crítica
CVE-2020-6008
LifterLMS Wordpress Plugin <= 3.37.14 - Arbitrary File Write
Media
CVE-2020-5392
Login by Auth0 Plugin <= 3.11.3 - Stored Cross-Site Scripting
Media
CVE-2020-20634
Elementor Website Builder <= 2.9.5 - Authorization Bypass
Media
CVE-2020-36702
Spectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing Authorization
Media
a7d0deb3-3d04-4f85-b769-0894d7c6ee7c
Easy Forms for Mailchimp <= 6.6.2 - Authenticated Cross-Site Scripting
Crítica
CVE-2020-10817
Custom Searchable Data Entry System <= 1.7.1 - SQL Injection
Media
e9b28209-498f-4319-be87-3f54c64d9ccd
CM Pop-Up banners <= 1.4.10 - Authenticated Stored Cross-Site Scripting
Media
CVE-2020-14010
Xenon - Bootstrap Admin Theme with AngularJS <= 1.3 - Reflected Cross-Site Scripting
Media
CVE-2020-11512
IMPress for IDX Broker <= 2.6.1 - Authenticated Stored Cross-Site Scripting
Alta
CVE-2020-9514
IMPress for IDX Broker <= 2.6.1 - Authenticated Arbitrary Post Creation, Modification, and Deletion
Crítica
CVE-2020-11514
Rank Math SEO <= 1.0.40.2 - Privilege Escalation via Unprotected REST API Endpoint
Alta
CVE-2020-11515
Rank Math SEO <= 1.0.40.2 - Redirect Creation via Unprotected REST API Endpoint
Alta
CVE-2020-12076
Data Tables Generator by Supsystic <= 1.9.91 - Cross-Site Request Forgery
Media
CVE-2020-36835
Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure
Media
CVE-2020-12075
Data Tables Generator by Supsystic <= 1.9.91 - Missing Authorization on AJAX Actions
Crítica
CVE-2022-0888
Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload
Media
CVE-2023-23793
Read More Without Refresh <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
7e4e1afd-604d-45c2-ab6b-fa9ccac0c361
All Import Pro Plugin < 4.1.2 - SQL injection
Media
32ac72f7-6bcc-4b5d-925a-9c5fc0c1f065
Advanced Ads <= 1.17.3 - Reflected Cross-Site Scripting
Media
CVE-2020-13644
Accordion <= 2.2.8 - Unprotected AJAX Action to Stored/Reflected Cross-Site Scripting
Alta
08115f30-f38b-4c13-803e-5de873f83a17
Custom Post Type UI <= 1.7.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
e91e6101-bd30-4cf1-9a39-23218c3bff6f
Newsletter <= 6.5.3 - CSV Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.