Media
CVE-2024-6708
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 53
Restablecer filtros
Crítica
CVE-2024-6695
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.11.8 - Authentication Bypass
Media
CVE-2024-6366
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.11.7 - Missing Authorization to Unauthenticated Media Upload
Media
CVE-2024-31341
Profile Builder <= 3.11.2 - Restricted Email Bypass
Alta
CVE-2024-0324
User Profile Builder <= 3.10.8 - Missing Authorization to Plugin Settings Change via wppb_two_factor_authentication_settings_update
Alta
CVE-2024-22140
Profile Builder Pro <= 3.10.0 - Cross-Site Request Forgery
Media
CVE-2024-22141
Profile Builder Pro <= 3.10.0 - Authenticated (Subscriber+) Time-Based One-Time Password Sensitive Information Exposure
Media
CVE-2024-22142
Profile Builder Pro <= 3.10.0 - Reflected Cross-Site Scripting
Media
CVE-2023-6504
Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode
Alta
CVE-2023-47669
Profile Builder <= 3.10.3 - Cross-Site Request Forgery via pms-cross-promotion.php
Media
CVE-2023-4059
Profile Builder <= 3.9.7 - Missing Authorization to Initial Page Creation
Crítica
CVE-2023-2297
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism
Media
CVE-2023-0814
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode
Alta
CVE-2021-36915
Profile Builder – User Profile & User Registration Forms <= 3.6.4 - Cross-Site Request Forgery
Media
CVE-2022-0884
Profile Builder <= 3.6.7 - Admin+ Stored Cross-Site Scripting
Media
CVE-2022-0653
Profile Builder - User Profile & User Registration Forms <= 3.6.1 - Cross-Site Scripting via site_url Parameter
Crítica
CVE-2021-24527
Profile Builder <= 3.4.8 - Admin Access via Password Reset
Media
CVE-2021-24448
Profile Builder <= 3.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
502724d9-ccc4-42db-bc1e-c521f7c80e70
Profile Builder/Profile Builder Pro <= 3.3.2 - Authenticated Blind SQL Injection
Crítica
8fcf7283-eb6c-4fee-b606-79026e2227fc
Profile Builder <= 3.1.0 - Privilege Escalation
Media
4364e713-8463-4088-b198-ed8237e86d42
Profile Builder < 2.5.8 - Cross-Site Scripting
Media
CVE-2016-10911
Profile Builder – User Profile & User Registration Forms < 2.4.2 - Cross-Site Scripting
Alta
2caed42f-fb5b-488a-af15-f5ad3d82a68c
Profile Builder <= 2.4.0 - Privilege Escalation
Media
CVE-2015-9328
Profile Builder – User Profile & User Registration Forms <= 2.2.4 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.