Mittel
CVE-2024-33688
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.563
Mittel
CVE-2024-33692
Smart Recent Posts Widget <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2024-30241
ProfileGrid <= 5.7.1 - Authenticated (Contributor+) SQL Injection
Mittel
CVE-2024-2744
Nextgen Gallery <= 3.59 - Authenticated (Administrator+) Stored Cross-Site Scripting
Mittel
CVE-2024-3309
Qi Addons For Elementor <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widget
Mittel
CVE-2024-33678
ClickCease Click Fraud Protection <= 3.2.7 - Cross-Site Request Forgery
Mittel
CVE-2024-1716
Admin Bar Remover <= 1.0.2.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Mittel
CVE-2024-1759
WP ULike <= 4.6.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Mittel
CVE-2024-33684
Save as PDF plugin by Pdfcrowd <= 3.2.0 - Missing Authorization
Mittel
CVE-2024-2838
WPC Composite Products for WooCommerce <= 7.2.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Mittel
CVE-2024-0905
Fancy Product Designer <= 6.1.7 - Reflected Cross-Site Scripting
Hoch
CVE-2024-1797
WP ULike – Most Advanced WordPress Marketing Toolkit <= 4.6.9 - Authenticated (Contributor+) SQL Injection via Shortcodes
Mittel
CVE-2024-3588
Getwid – Gutenberg Blocks <= 2.0.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown'
Niedrig
CVE-2024-3034
BackUpWordPress <= 3.13 - Authenticated (Admin+) Directory Traversal
Hoch
CVE-2024-3231
Popup4Phone <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2024-33695
Fan Page Widget by ThemeNcode <= 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2024-2258
Form Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting
Mittel
CVE-2024-2429
Salon booking system <= 9.6.5 - Cross-Site Request Forgery to Settings Update
Mittel
CVE-2024-4234
Filterable Portfolio <= 1.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2024-33697
CF7 File Download – File Download for CF7 <= 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2024-3870
Contact Form 7 Database Addon – CFDB7 <= 1.2.6.8 - Unauthenticated Sensitive Information Exposure
Kritisch
CVE-2024-3342
Timetable and Event Schedule by MotoPress <= 2.4.11 - Authenticated (Contributor+) SQL Injection
Mittel
CVE-2024-33696
WordPress Ad Widget <= 2.20.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2024-33686
ColibriWP Theme framework <= (Various Versions) - Missing Authorization
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.