Mittel
CVE-2023-7073
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 8.950
Filter zurücksetzen
Hoch
CVE-2024-2793
Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.30 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2024-4205
Premium Addons for Elementor <= 4.10.31 - Missing Authorization to Information Disclosure
Mittel
CVE-2024-3190
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field
Kritisch
CVE-2024-5150
Login with phone number <= 1.7.26 - Authentication Bypass due to Missing Empty Value Check
Kritisch
CVE-2024-35629
Easy Digital Downloads – Recent Purchases <= 1.0.2 - Unauthenticated Remote File Inclusion
Hoch
CVE-2024-35634
Woocommerce – Recent Purchases <= 1.0.1 - Authenticated (Admin+) Local File Inclusion
Mittel
CVE-2024-4045
Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation <= 2.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-4858
Testimonial Carousel For Elementor <= 10.2.0 - Missing Authorization to Limited Setting Update
Mittel
CVE-2024-4480
WP Prayer II <= 2.4.7 - Cross-Site Request Forgery to Email Settings Update
Hoch
CVE-2024-0867
Email Log <= 2.4.8 - Unauthenticated Hook Injection
Mittel
CVE-2024-1134
SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hoch
CVE-2024-1974
HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal
Mittel
CVE-2024-4484
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-2784
The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Hover Card
Kritisch
CVE-2024-4544
Pie Register - Social Sites Login (Add on) <= 1.7.7 - Authentication Bypass
Mittel
CVE-2024-3032
Themify Builder <= 7.5.7 - Open Redirect via 'tb_redirect_fail'
Mittel
CVE-2024-4485
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kritisch
CVE-2024-3552
Web Directory Free <= 1.6.9 - Unauthenticated SQL Injection
Mittel
CVE-2024-4149
Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2024-3718
The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pricing Table, & Flip Box
Mittel
CVE-2024-3626
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 - Missing Authorization
Mittel
CVE-2024-4378
Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Menu and Shape Divider
Hoch
CVE-2024-4662
Oxygen Builder <= 4.8.2 - Authenticated (Contributor+) Remote Code Execution
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.