Media
CVE-2024-32825
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Media
CVE-2024-32772
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.7.9 - Insecure Direct Object Reference
Media
CVE-2024-32722
Coupon & Discount Code Reveal Button <= 1.2.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Media
CVE-2024-32811
USPS Shipping for WooCommerce – Live Rates <= 1.9.4 - Sensitive Information Exposure
Baja
CVE-2024-32834
WooCommerce Shipping Label <= 2.3.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Crítica
CVE-2024-32710
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Authenticated (Contributor+) SQL Injection
Media
CVE-2024-32826
VK Block Patterns <= 1.31.0 - Missing Authorization
Media
CVE-2024-32778
Contest Gallery <= 21.3.4 - Authenticated (Author+) Arbitrary File Deletion
Media
CVE-2024-32810
ShortPixel Critical CSS <= 1.0.2 - Missing Authorization
Media
CVE-2024-32953
Newsletters <= 4.9.5 - Information Exposure via Log files
Media
CVE-2024-3889
Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title Tags
Media
CVE-2024-32785
The Pack Elementor addons (Header Footer & WooCommerce Builder, Template Library) <= 2.0.8.3 - Reflected Cross-Site Scripting
Crítica
CVE-2024-32709
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Unauthenticated SQL Injection
Media
CVE-2024-32789
Seers | GDPR & CCPA Cookie Consent & Compliance <= 8.1.0 - Cross-Site Request Forgery
Media
CVE-2024-0900
Elespare – Build Your Blog, News & Magazine Websites with Expert-Designed Template Kits. One Click Import: No Coding Skills Required! <= 2.1.2 - Missing Authorization to Subscriber+ Arbitrary Post Creation
Media
CVE-2024-3677
Ultimate 410 Gone Status Code <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-32704
ARForms <= 6.4 - Missing Authorization to Arbitrary Option Deletion
Media
CVE-2024-3489
Exclusive Addons for Elementor <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Expired Title
Media
CVE-2024-32801
Widget Post Slider <= 1.3.5. - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-32956
RomethemeKit For Elementor <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-32717
SchedulePress <= 5.0.8 - Missing Authorization
Alta
CVE-2024-32836
WP-Lister Lite for eBay <= 3.5.11 - Authenticated (Shop Manager+) Arbitrary File Upload
Media
CVE-2024-2798
Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Media
CVE-2024-32822
Reviews Plus <= 1.3.4 - Missing Authorization to Notice Dismissal
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.