Alta
CVE-2021-24696
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtros
Media
CVE-2021-25067
Landing Page Builder <= 1.4.9.5 - Reflected Cross-Site Scripting
Crítica
CVE-2021-25037
All in One SEO 4.1.3.1 - 4.1.5.2 - Authenticated SQL Injection
Alta
CVE-2021-25036
All in One SEO 4.0.0 - 4.1.5.2 Authorization Bypass
Media
CVE-2021-39314
WooCommerce EnvioPack <= 1.2 Reflected Cross-Site Scripting
Media
CVE-2021-39315
Magic Post Voice <= 1.2 - Reflected Cross-Site Scripting
Alta
CVE-2021-36887
tarteaucitron.js – Cookies legislation & GDPR <= 1.5.4 - Cross-Site Request Forgery to Cross-Site Scripting
Crítica
CVE-2021-4073
RegistrationMagic <= 5.0.1.7 - Authentication Bypass
Media
CVE-2021-25047
10Web Social Photo Feed <= 1.4.28 - Reflected Cross-Site Scripting
Alta
CVE-2021-24831
Tab – Accordion, FAQ < 1.3.2 - Unauthenticated Arbitrary Tab Modification
Alta
CVE-2021-25030
Events Made Easy <= 2.2.35 - Subscriber+ SQL Injection
Media
cb6bfe31-0c90-4aca-8165-b30507f18ea5
Multivendor Marketplace Solution for WooCommerce – WC Marketplace < 3.8.4 - Reflected Cross-Site Scripting
Alta
CVE-2021-24973
Site Reviews <= 5.17.2 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2021-25016
Floating Chat Widget: Contact Icons, Messages, Telegram, Email, SMS, Call Button - Chaty <= 2.8.2 Reflected Cross-Site Scripting
Media
CVE-2021-20866
Advanced Custom Fields <= 5.10 - Missing Authorization to Information Disclosure
Alta
CVE-2021-20865
Advanced Custom Fields <= 5.10 - Missing Authorization to Information Disclosure
Media
CVE-2021-20867
Advanced Custom Fields <= 5.10 - Missing Authorization on Option Changes
Media
CVE-2021-24964
LiteSpeed Cache <= 4.4.3 - Authorization Bypass
Media
79ff583b-f18a-4e04-9c23-9d3a4eca8c6b
WP Mail Logging < 1.10.0 - Unauthenticated Arbitrary Settings Change
Media
CVE-2021-25009
CorreosExpress <= 2.6.0 - Sensitive Data Exposure
Alta
CVE-2021-24967
Contact Form & Lead Form Elementor Builder <= 1.6.3 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2021-24988
WP RSS Aggregator <= 4.19.2 - Subscriber+ Stored Cross-Site Scripting
Media
CVE-2021-24980
Gwolle Guestbook <= 4.1.2 - Reflected Cross-Site Scripting
Media
CVE-2021-24979
Paid Memberships Pro <= 2.6.5 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.