Media
CVE-2023-44991
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtros
Alta
CVE-2023-5645
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL injection via key
Media
CVE-2023-44982
WP Retina 2x <= 6.4.5 - Sensitive Information Exposure
Media
CVE-2023-41671
Abandoned Cart Lite for WooCommerce <= 5.16.1 - Missing Authorization via multiple AJAX functions
Media
CVE-2023-48769
Chat Bubble <= 2.3 - Cross-Site Request Forgery via cbb_submit_settings_data
Media
CVE-2023-48752
Happyforms <= 1.25.9 - Reflected Cross-Site Scripting
Media
CVE-2023-38474
Campaign Monitor for WordPress <= 2.8.12 - Reflected Cross-Site Scripting
Media
CVE-2023-6289
Swift Performance Lite <= 2.3.6.14 - Missing Authorization to Unauthenticated Settings Export
Media
CVE-2023-48753
Restricted Site Access <= 7.4.1 - IP Spoofing to Protection Mechanism Bypass
Media
CVE-2023-6226
WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Insecure Direct Object Reference to Information Disclosure
Media
CVE-2023-6295
SiteOrigin Widgets Bundle < 1.51.0 - Authenticated (Admin+) Local File Inclusion
Crítica
CVE-2023-6584
WP JobSearch <= 2.3.3 - Authentication Bypass
Media
CVE-2023-48744
Availability Calendar <= 1.2.6 - Cross-Site Request Forgery via add_availability_calendar_create_admin_page()
Media
CVE-2023-40680
Yoast SEO <= 21.0 - Authenticated (Seo Manager+) Stored Cross-Site Scripting
Media
CVE-2023-48282
Taxonomy filter <= 2.2.9 - Cross-Site Request Forgery via taxonomy_filter_save_main_settings()
Alta
CVE-2023-48741
ChatBot <= 4.7.8 - Authenticated (Administrator+) SQL Injection
Media
CVE-2023-48325
Landing Page Builder <= 1.5.1.5 - Open Redirect
Media
CVE-2023-48318
Contact Form Email <= 1.3.41 - Captcha Bypass
Media
CVE-2023-48332
Mail Bank - #1 Mail SMTP Plugin for WordPress <= 4.0.14 - Missing Authorization
Media
CVE-2023-48285
Accept Stripe Payments <= 2.0.79 - Unauthenticated Content Injection
Media
CVE-2023-48275
Multiple Plugins by Trustindex.io <= (Various Versions)- Authenticated (Editor+) Arbitrary File Upload
Crítica
CVE-2023-2449
UserPro <= 5.1.1 - Insecure Password Reset Mechanism
Crítica
CVE-2023-2437
UserPro <= 5.1.1 - Authentication Bypass to Administrator
Baja
52d1f9a3-243e-4e2c-a752-f40b6d275121
Abandoned Cart Lite for WooCommerce <= 5.16.0 - Improper Authorization via wcal_delete_expired_used_coupon_code
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.