Media
CVE-2024-0256
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.681
Restablecer filtros
Alta
CVE-2024-23513
PropertyHive <= 2.0.5 - Unauthenticated PHP Object Injection via propertyhive_currency
Media
CVE-2024-0366
Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Reference
Crítica
CVE-2024-23512
ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks <= 3.1.4 - PHP Object Injection via wopb_wishlist and wopb_compare
Media
CVE-2024-0668
Advanced Database Cleaner <= 3.1.3 - Authenticated(Administrator+) PHP Object Injection via process_bulk_action
Alta
CVE-2023-6933
Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection
Crítica
CVE-2024-22309
ChatBot <= 5.1.0 - Unauthenticated PHP Object Injection
Crítica
CVE-2024-22284
Asgaros Forum <= 2.7.2 - Unauthenticated PHP Object Injection in prepare_unread_status
Media
CVE-2023-6582
ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposure
Crítica
CVE-2023-52225
Taggbox <= 3.1 - Unauthenticated PHP Object Injection
Media
CVE-2023-7019
LightStart – Maintenance Mode, Coming Soon and Landing Page Builder <= 2.6.8 - Missing Authorization
Crítica
CVE-2023-52218
WooCommerce Tranzila Gateway <= 1.0.8 - Unauthenticated PHP Object Injection
Alta
CVE-2023-52219
Gecka Terms Thumbnails <= 1.1 - Authenticated (Subscriber+) PHP Object Injection
Alta
CVE-2023-52202
HTML5 MP3 Player with Folder Feedburner <= 2.8.0 - Authenticated (Author+) PHP Object Injection
Alta
CVE-2023-52207
HTML5 MP3 Player with Playlist Free <= 3.0.0 - Authenticated (Author+) PHP Object Injecton
Alta
CVE-2023-52206
Page Builder: Live Composer <= 1.5.25 - Authenticated (Author+) PHP Object Injection
Alta
CVE-2023-52205
HTML5 SoundCloud Player <= 2.8.0 - Authenticated (Author+) PHP Object Injection
Media
CVE-2023-52213
Rate Star Review <= 1.5.1 - Reflected Cross-Site Scripting
Crítica
CVE-2023-52181
Theme per user <= 1.0.1 - Unauthenticated PHP Object Injection
Media
CVE-2023-6384
WP User Profile Avatar <= 1.0.0 - Authenticated (Author+) Insecure Direct Object Reference to Avatar Deletion/Update
Alta
CVE-2023-52182
ARI Stream Quiz <= 1.3.0 - Authenticated (Contributor+) PHP Object Injection
Media
CVE-2023-52118
WP User Profile Avatar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-49777
YITH WooCommerce Product Add-Ons <= 4.3.0 - Authenticated(Shop Manager+) PHP Object Injection
Crítica
CVE-2023-51505
Active Products Tables for WooCommerce <= 1.0.6 - Unauthenticated PHP Object Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.