Media
CVE-2023-24416
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtros
Alta
CVE-2023-25967
Community by PeepSo <= 6.0.2.0 - Cross-Site Request Forgery leading to Plugin/Subscription Deletion
Alta
CVE-2023-0340
Custom Content Shortcode <= 4.0.2 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Media
CVE-2023-0389
Calculated Fields Form <= 1.1.150 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2023-23830
ProfilePress <= 4.5.4 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2023-23705
WordPress Books Gallery <= 4.4.8 - Cross-Site Request Forgery leading to Plugin Settings Changes
Media
CVE-2023-23708
Visualizer <= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Media
CVE-2022-47143
Multiple Page Generator Plugin <= 3.3.9 - Cross-Site Request Forgery
Media
CVE-2022-46851
Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 3.1.20 - Cross-Site Request Forgery in add_to_favorite
Media
CVE-2023-23820
ProfilePress <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Alta
CVE-2023-26326
BuddyForms <= 2.7.7 - PHAR Deserialization
Media
CVE-2022-47422
Accept Stripe Donation – AidWP <= 3.1.5 - Cross Site Request Forgery
Media
CVE-2023-25991
RegistrationMagic <= 5.1.9.2 - Cross-Site Request Forgery leading to Form Metadata Deletion
Media
CVE-2022-40203
Advanced Dynamic Pricing for WooCommerce <= 4.1.5 - Missing Authorization in ajaxCalculateSeveralProducts function
Media
CVE-2023-0538
Campaign URL Builder <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-23724
WordPress Email Marketing Plugin – WP Email Capture <= 3.9.3 - Cross Site Request Forgery
Media
CVE-2023-25796
WP BaiDu Submit <= 1.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
06294c35-6d58-4270-b143-757831fc5da6
Campaign URL Builder <= 1.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting via Create Link
Media
CVE-2023-25697
GamiPress <= 2.5.6 - Cross-Site Request Forgery to User Earnings Deletion
Media
CVE-2022-38468
NextGEN Gallery <= 3.28 - Cross-Site Request Forgery leading to Post Thumbnail Change
Media
CVE-2023-25709
Locatoraid Store Locator <= 3.9.11 - Cross Site Request Forgery in grab
Media
75f0bc5a-f588-4aeb-9e55-72e180d39ddf
ALD Dropping and Fulfillment for AliExpress and WooCommerce <= 1.0.21 - Missing Authorization to Order Information Disclosure
Media
5ebdf903-828e-4a22-953a-17d85984b576
AutomatorWP <= 2.5.8 - Cross Site Request Forgery via bulk_delete
Media
CVE-2022-46811
ALD Dropping and Fulfillment for AliExpress and WooCommerce <= 1.0.21 - Cross-Site Request Forgery to Order Information Disclosure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.