Media
CVE-2023-0726
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2023-0728
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_save_folder
Media
CVE-2023-0730
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_folder_order
Media
CVE-2023-0716
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folder
Media
CVE-2023-0717
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder
Media
CVE-2023-0718
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder
Media
CVE-2023-0713
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_add_folder
Media
CVE-2023-0722
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state
Alta
CVE-2023-0477
Auto Featured Image (Auto Post Thumbnail) <= 3.9.15 - Authenticated (Author+) Arbitrary File Upload
Media
CVE-2023-0712
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_move_object
Media
CVE-2023-0724
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder
Sin evaluar
765
J-BusinessDirectory - Other
Crítica
CVE-2015-10073
tinymighty WikiSEO is vulnerable to cross-site scripting via modifyHTML function
Media
CVE-2020-36660
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been rated as problematic. This issue affects some unknown processing of the file src/evesrp/views/api.py of the comp
Alta
CVE-2022-25855
create-choo-app3 is vulnerable to Command Injection via the devInstall function
Alta
CVE-2022-25853
semver-tags is vulnerable to Command Injection via the getGitTagsRemote function
Media
ee50731f-696f-4e9f-a930-05b2b23752de
Cost of Goods for WooCommerce <= 2.8.6 - Cross-Site Request Forgery in save_costs
Media
CVE-2023-0685
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders
Media
df1a3425-b1d7-4914-ab19-c215d4e845ea
Album and Image Gallery plus Lightbox <= 1.6.2 - Cross-Site Request Forgery
Media
CVE-2022-46798
ShopLentor <= 2.5.1 - Cross-Site Request Forgery to Post Updates
Media
CVE-2022-46848
Visualizer <= 3.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting
Media
CVE-2022-45068
Mercado Pago payments for WooCommerce <= 6.3.1 - Cross-Site Request Forgery
Alta
CVE-2023-0381
GigPress <= 2.3.28 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2022-46796
CURCY <= 2.1.25 - Missing Authorization to Currency Exchange Retrieval
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.