Media
CVE-2023-35909
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtros
Crítica
15f3a6e1-6126-4825-b2b1-e40dc5694f43
Atarim - Client Interface <= 3.9.1 - Missing Authorization via AJAX actions
Alta
CVE-2023-3087
FluentSMTP <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Alta
CVE-2022-46849
Coming Soon Page <= 1.5.9 - Authenticated (Administrator+) SQL Injection
Alta
CVE-2023-3092
SMTP Mail <= 1.3.46 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Alta
CVE-2023-3088
WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email
Crítica
CVE-2023-37389
Booking Package <= 1.5.98 - Authorization Bypass to Arbitrary Password Reset
Alta
CVE-2023-3168
WP Reroute Email <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Media
CVE-2023-37387
Classified Listing <= 2.4.5 - Cross-Site Request Forgery via rtcl_ajax_thumbnail_delete
Crítica
CVE-2023-3342
User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
Media
CVE-2023-31230
Baidu Tongji generator <= 1.0.2 - Cross-Site Request Forgery
Media
CVE-2023-23893
Simple Giveaways <= 2.46.0 - Missing Authorization via AJAX actions
Alta
CVE-2023-3343
User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection
Alta
CVE-2023-36381
Zippy <= 1.6.5 - Authenticated(Author+) PHP Object Injection via unzipPosts
Crítica
155e3de1-e115-4683-bb4d-a0c5667dc3d3
WP Post Author <= 3.2.3 - Privilege Escalation
Crítica
CVE-2023-2982
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass
Media
CVE-2023-23684
WPGraphQL <= 1.14.5 - Authenticated (Editor+) Server-Side Request Forgery
Media
CVE-2023-36523
Email download link <= 3.7 - Unauthenticated Sensitive Information Exposure
Media
20910787-b99d-475e-acc9-cc2bb669aa56
Waitlist Woocommerce ( Back in stock notifier ) <= 2.5.2 - Cross-Site Request Forgery to Settings Reset
Media
CVE-2023-1844
Subscribe2 <= 10.40 - Missing Authorization
Media
CVE-2023-3178
POST SMTP Mailer <= 2.5.6 - Cross-Site Request Forgery to Arbitrary Log Deletion
Media
CVE-2023-3407
Subscribe2 <= 10.40 - Cross-Site Request Forgery
Media
CVE-2023-3179
POST SMTP Mailer <= 2.5.6 - Cross-Site Request Forgery to Account Compromise
Media
CVE-2023-3245
Floating Chat Widget - Chaty <= 3.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.