Hoch
CVE-2024-11393
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.602
Hoch
CVE-2024-11392
Deserialization of Untrusted Data in Hugging Face Transformers
Hoch
CVE-2024-11034
Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation <= 1.4 - Unauthenticated Arbitrary Shortcode Execution via fire_contact_form
Mittel
CVE-2024-11199
Rescue Shortcodes <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rescue_progressbar Shortcode
Mittel
CVE-2024-11227
Memberlite Shortcodes <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via memberlite_accordion Shortcode
Mittel
CVE-2024-10519
Wishlist for WooCommerce: Multi Wishlists Per Customer PRO 3.0.8 - 3.1.2 - Reflected Cross-Site Scripting via wtab Parameter
Mittel
ghsa-pqhp-25j4-6hq9
smol-toml has a Denial of Service via malicious TOML document using deeply nested inline tables
Mittel
CVE-2024-53253
Sentry improper error handling leaks Application Integration Client Secret
Kritisch
CVE-2024-9942
WPGYM <= 67.1.0 - Unauthenticated Arbitrary File Upload
Mittel
CVE-2024-9635
Checkout with Cash App on WooCommerce <= 6.0.2 - Reflected Cross-Site Scripting
Mittel
CVE-2024-11446
Chessgame Shizzle <= 1.3.0 - Reflected Cross-Site Scripting
Mittel
CVE-2024-11330
Custom CSS, JS & PHP <= 2.3.0 - Reflected Cross-Site Scripting
Mittel
CVE-2024-11265
Wp Maximum Upload File Size <= 1.1.3 - Authenticated (Author+) Full Path Disclosure
Mittel
CVE-2024-11188
Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter
Mittel
CVE-2024-11463
DeBounce Email Validator <= 5.6.5 - Reflected Cross-Site Scripting
Mittel
CVE-2024-10216
WP User Manager – User Profile Builder & Membership <= 2.9.11 - Missing Authorization to Carbon Fields Custom Sidebar Addition/Removal
Mittel
CVE-2024-9223
WPDash Notes <= 1.3.5 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Mittel
CVE-2024-10813
Product Table for WooCommerce by CodeAstrology (wooproducttable.com) <= 3.5.1 - Information Exposure
Mittel
CVE-2024-10874
Quotes llama <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-10869
GuardGiant Brute Force Protection <= 2.2.6 - Reflected Cross-Site Scripting
Mittel
CVE-2024-10868
Enter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post Disclosure
Mittel
CVE-2024-10886
Tribute Testimonials – WordPress Testimonial Grid/Slider <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kritisch
CVE-2024-10961
Social Login <= 5.9.0 - Authentication Bypass via Disqus OAuth provider
Mittel
CVE-2024-10116
Twitter Follow Button <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via username Parameter
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.