Hoch
CVE-2024-0702
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 41.670
Filter zurücksetzen
Mittel
CVE-2024-1288
Schema & Structured Data for WP & AMP <= 1.26 - Missing Authorization to reCaptcha Key Modification
Mittel
CVE-2024-0656
Password Protected <= 2.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2024-1586
Schema & Structured Data for WP & AMP <= 1.26 - Authenticated (Custom) Stored Cross-Site Scripting
Mittel
CVE-2024-1496
Featured Image from URL (FIFU) <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url
Hoch
CVE-2024-1217
Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization to Arbitrary Plugin Deactivation
Mittel
CVE-2024-1408
ProfilePress <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via [edit-profile-text-box] shortcode
Mittel
CVE-2024-1519
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.14.4 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2024-1570
ProfilePress <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Mittel
CVE-2024-1492
WPify Woo Czech <= 4.0.8 - Missing Authorization
Mittel
CVE-2024-1475
Coming Soon Maintenance Mode <= 1.0.5 - Information Exposure
Mittel
CVE-2024-1559
Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting
Kritisch
CVE-2024-1068
404 Solution <= 2.35.7 - Authenticated (Admin+) SQL Injection
Mittel
CVE-2023-6444
Seriously Simple Podcasting <= 2.25.3 - Unauthenticated Email Disclosure
Kritisch
CVE-2024-0610
Piraeus Bank WooCommerce Payment Gateway <= 1.6.5.1 - Unauthenticated SQL Injection
Kritisch
CVE-2024-1512
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection
Mittel
CVE-2024-0590
Microsoft Clarity <= 0.9.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Mittel
CVE-2024-1445
Page scroll to id <= 1.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Mittel
CVE-2024-1279
Paid Memberships Pro <= 2.12.8 - Authenticated (Contributor+) Information Disclosure via Shortcode
Mittel
CVE-2024-0978
My Private Site <= 3.0.14 - Improper Access Control to Sensitive Information Exposure via REST API
Mittel
CVE-2024-1472
WP Maintenance <= 6.1.6 - Information Exposure
Mittel
CVE-2024-1277
Ocean Extra <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hoch
CVE-2024-25909
WP Media folder <= 5.7.2 - Authenticated (Subscriber+) Arbitrary File Upload
Mittel
CVE-2024-1411
PowerPack Addons for Elementor <= 2.7.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Buttons Widget
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.