Media
CVE-2023-51537
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.533
Media
CVE-2023-51510
Export Media URLs <= 1.0 - Cross-Site Request Forgery
Crítica
CVE-2023-51472
Checkout Mestres WP <= 7.1.9.6 - Authentication Bypass via Password Reset
Alta
CVE-2023-51546
WooCommerce PDF Invoices <= 4.2.1 - Authenticated(Shop Manager+) Arbitrary Options Update via JSON Import
Crítica
CVE-2023-51411
Frontend Admin by DynamiApps Plugin <= 3.18.3 - Unauthenticated Arbitrary File Upload
Crítica
CVE-2023-51478
Build App Online <= 1.0.21 - Authentication Bypass via Header
Media
CVE-2023-51506
WPCS – WordPress Currency Switcher Professional <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2023-51470
Rencontre – Dating Site <= 3.11.1 - Authenticated (Subscriber+) PHP Object Injection
Alta
CVE-2023-51421
Verge3D <= 4.5.2 - Authenticated(Subscriber+) Arbitrary File Upload
Media
CVE-2023-51670
FunnelKit Checkout <= 3.10.3 - Authenticated(Subscriber+) Missing Authorization to Arbitrary Plugin Activation
Media
CVE-2023-51529
HT Mega <= 2.3.3 - Cross-Site Request Forgery via Several Functions
Media
CVE-2023-51502
WooCommerce Stripe Payment Gateway <= 7.6.1 - Insecure Direct Object Reference via update_payment_intent_ajax
Media
CVE-2023-51522
Paid Member Subscriptions <= 2.10.4 - Cross-Site Request Forgery via ajax_add_log_entry
Media
CVE-2023-51503
WooPayments – Fully Integrated Solution Built and Supported by Woo <= 6.6.2 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2023-51486
WooCommerce PDF Invoice Builder <= 1.2.101 - Cross-Site Request Forgery
Media
CVE-2023-51676
Happy Addons for Elementor <= 3.9.1.1 - Server Side Request Forgery
Media
CVE-2023-51497
WooCommerce Ship to Multiple Addresses <= 3.8.9 - Missing Authorization
Media
CVE-2023-51685
WP Review Slider <= 12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Crítica
CVE-2023-51484
Login as User or Customer (User Switching) <= 3.8 - Authentication Bypass
Crítica
CVE-2023-51468
Rencontre – Dating Site <= 3.10.1 - Unauthenticated Arbitrary File Upload
Media
CVE-2023-51539
Apollo13 Framework Extensions <= 1.9.1 - Cross-Site Request Forgery
Media
CVE-2023-51542
Branda <= 3.4.14 - IP Address Spoofing
Media
CVE-2023-51528
GPT3 AI Content Writer <= 1.8.12 - Cross-Site Request Forgery
Media
CVE-2023-51498
WooCommerce Canada Post Shipping <= 2.8.3 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.