Alta
CVE-2022-2442
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtros
Alta
CVE-2022-2376
Directorist <= 7.3.0 - Sensitive Information Disclosure
Media
CVE-2022-2373
Simply Schedule Appointments <= 1.5.7.5 - Unauthenticated Sensitive Information Exposure
Alta
52daa230-1600-4ace-9adf-3f4e9be51e9f
Jupiter X Core <= 2.0.9 - Missing Authorization Checks
Alta
CVE-2022-2434
String Locator <= 2.5.0 - Cross-Site Request Forgery to PHAR Deserialization
Media
afc9114b-80b7-4caf-ab6b-35747ff5057b
Frontend File Manager & Sharing – User Private Files <= 1.1.0 - Sensitive Information Disclosure
Media
ecde34f7-4624-4361-8d95-56fd4b08b476
Minimal Coming Soon – Coming Soon Page <= 2.33 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
96bc0d9b-1f03-48d4-aa99-954e92e77c04
Cyclone Slider <= 3.2.0 - Authenticated (Admin+) Arbitrary File Upload
Alta
5bf0267d-b84f-4ad2-8bb3-cc2aa4996af1
PostmagThemes Demo Import <= 1.0.6 - Authenticated (Admin+) Arbitrary File Upload
Media
CVE-2022-2080
Sensei LMS <= 4.5.1 - Missing Authorization
Alta
CVE-2022-2657
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Multiple Unprotected AJAX Actions
Alta
CVE-2022-2261
WPIDE – File Manager & Code Editor <= 2.6 - Authenticated (Admininstrator+) Local File Inclusion
Media
CVE-2022-2267
Mailchimp for WooCommerce <= 2.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Media
CVE-2022-2556
Mailchimp for WooCommerce <= 2.7.1 - Authenticated (Admin+) Server-Side Request Forgery
Crítica
CVE-2022-34149
WP OAuth Server <= 3.0.4 - Authentication Bypass
Media
CVE-2022-2362
Download Manager <= 3.2.49 - IP Blocking Bypass
Media
e012d7a0-46f9-4f3b-a178-2d06655fd441
External url as post Featured Image <= 2.02 - Reflected Cross-Site Scripting
Alta
CVE-2022-36284
Affiliate For WooCommerce premium <= 4.7.0 - Authenticated Insecure Direct Object Reference
Alta
CVE-2022-33201
MailerLite – Signup forms (official) <= 1.5.7 - Cross-Site Request Forgery
Alta
CVE-2022-2557
Team - WordPress Team Member Showcase Plugin <= 4.1.1 - Directory Traversal to Arbitrary File Read/Deletion
Media
a8163dc0-e380-4a0b-bd18-34a3e80ca3dd
VR Calendar <= 2.4.4 - Authenticated (Administrator+) Local File Inclusion
Crítica
CVE-2022-2551
Duplicator – WordPress Migration Plugin <= 1.4.7 - Unauthenticated Backup Download
Alta
CVE-2022-2552
Duplicator – WordPress Migration Plugin <= 1.4.7 - Sensitive Information Disclosure
Media
CVE-2022-2377
Directorist – WordPress Business Directory Plugin with Classified Ads Listings <= 7.2.3 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.