Media
c3190f9f-8b2f-4251-8804-f386e2c5678f
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2023-25035
Quick Contact Form <= 8.0.3.1 - Cross-Site Request Forgery to Sensitive Information Disclosure
Media
CVE-2023-25026
PayPal Brasil para WooCommerce <= 1.4.2 - Cross-Site Request Forgery
Media
CVE-2023-25031
Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-46797
All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce <= 5.2.3 - Cross-Site Request Forgery
Media
CVE-2022-45810
Icegram Express <= 5.5.2 - Unauthenticated CSV Injection
Media
CVE-2023-25039
Google Maps CP <= 1.0.43 - Missing Authorization to Authenticated (Subscriber+) Feedback Form Submission
Media
CVE-2023-0376
Quebely <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Option
Media
CVE-2023-23868
Cost of Goods for WooCommerce <= 2.8.6 - Missing Authorization in save_costs
Media
CVE-2023-25024
Icegram Collect <= 1.3.8 - Authenticated(Contributor+) Cross-Site Scripting via Shortcode
Media
CVE-2023-23885
Quick Contact Form <= 8.0.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-0552
Pie Register <= 3.8.2.2 - Open Redirect
Media
CVE-2022-45840
Auto Affiliate Links <= 6.2.1.5 - Authenticated (Subscriber+) Plugin Settings Change
Media
CVE-2023-25027
Chained Quiz <= 1.3.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2023-25041
Monolit <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2022-38456
Ajax Search Lite <= 4.10.3 - Missing Authorization leading to Authenticated (Subscriber+) Sensitive Information Disclosure
Media
CVE-2022-45803
Gutenberg Forms <= 2.2.8.3 - Authenticated(Subscriber+) Sensitive Information Disclosure
Alta
CVE-2023-23990
Redirection for Contact Form 7 <= 2.7.0 - Authenticated(Editor+) Privilege Escalation
Media
CVE-2022-45370
WordPress Comments Import & Export <= 2.3.1 - CSV Injection
Media
CVE-2023-25049
Vulnerability: eCommerce Product Catalog plugin for WordPress <= 3.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-23711
A2 Optimized WP <= 3.0.4 - Cross Site Request Forgery
Media
CVE-2022-2933
0mk Shortener <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2023-0684
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders
Media
CVE-2023-25037
Booking Calendar Contact Form <= 1.2.34 - Cross-Site Request Forgery via cpdexbccf_feedback
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.