Media
CVE-2023-41862
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2023-41847
Notice Bar <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-41859
Order Delivery Date for WP e-Commerce <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-4779
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-41949
iFolders <= 1.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-41950
Laposta Signup Basic <= 1.4.1 - Cross-Site Request Forgery
Media
CVE-2023-41870
WP Crowdfunding <= 2.1.4 - Missing Authorization via settings_reset
Media
CVE-2023-41868
Stagtools <= 2.3.7 - Reflected Cross-Site Scripting
Alta
CVE-2023-41863
PeproDev CF7 Database <= 1.7.0 - Unauthenticated Stored Cross-Site Scripting via form submission
Media
CVE-2023-41697
Easy WP Cleaner <= 1.9 - Cross-Site Request Forgery
Crítica
CVE-2023-40555
Flatsome <= 3.17.5 - Unauthenticated PHP Object Injection
Media
CVE-2023-41853
WP iCal Availability <= 1.0.3 - Cross-Site Request Forgery
Media
CVE-2023-4773
WordPress Social Login <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-41869
WP Accessibility Helper (WAH) <= 0.6.2.4 - Missing Authorization via AJAX action
Media
b7e417c2-bf9c-4c88-be2b-9c2324897b07
Laposta Signup Basic <= 1.4.1 - Missing Authorization
Media
CVE-2023-41851
WP Custom Post Template <= 1.0 - Cross-Site Request Forgery
Media
CVE-2023-41856
Click To Tweet <= 2.0.14 - Reflected Cross-Site Scripting
Media
CVE-2023-41801
AWP Classifieds <= 4.3 - Cross-Site Request Forgery
Baja
CVE-2023-41798
Directorist <= 7.7.1 - CSV Injection
Media
CVE-2023-41867
AcyMailing SMTP Newsletter <= 8.6.2 - Reflected Cross-Site Scripting
Media
CVE-2023-41695
Analytify Dashboard <= 5.1.0 - Missing Authorization to Opt-In
Media
CVE-2023-41850
Outbound Link Manager <= 1.2 - Cross-Site Request Forgery
Media
CVE-2023-41857
Click To Tweet <= 2.0.14 - Missing Authorization
Media
CVE-2023-41735
Email posts to subscribers <= 6.2 - Missing Authorization to Sensitive Information Exposure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.