Mittel
CVE-2023-0151
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.602
Mittel
CVE-2023-0275
Easy Accept Payments for PayPal <= 4.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Mittel
CVE-2022-4562
Meks Flexible Shortcodes <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Mittel
b64bd2b9-56d5-47d4-9532-3718bf2381a7
MainWP Broken Link Checker <= 4.0 - Missing Authorization to Arbitrary Plugin Activation
Hoch
CVE-2022-4745
WP Customer Area <= 8.1.3 - Cross-Site Request Forgery
Mittel
CVE-2023-23643
MainWP iThemes Security Extension <= 4.1.1 - Missing Authorization to Arbitrary Plugin Activation
Mittel
CVE-2023-23652
MainWP Google Analytics Extension <= 4.0.4 - Missing Authorization to Plugin Settings Change
Mittel
CVE-2023-0099
Simple URLs <= 114 - Reflected Cross-Site Scripting
Mittel
CVE-2023-0061
Judge.me Product Reviews for WooCommerce <= 1.3.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Mittel
CVE-2023-23644
MainWP Page Speed Extension <= 4.0.2 - Missing Authorization to Arbitrary Plugin Activation
Mittel
CVE-2022-4678
TemplatesNext ToolKit <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Mittel
CVE-2023-22716
OOPSpam Anti-Spam <= 1.1.35 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2022-4656
WP Visitor Statistics (Real Time Traffic) <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Hoch
CVE-2023-22704
teachPress <= 8.1.8 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2023-23665
MainWP Rocket Extension <= 4.0.3 - Missing Authorization to Plugin Settings Change
Mittel
CVE-2022-4488
Widgets on Pages <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2023-22715
WP-CommentNavi <= 1.12.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2023-23642
MainWP Clone Extension <= 4.0.2 - Missing Authorization to Plugin Settings Change
Mittel
CVE-2023-23659
MainWP Matomo Extension <= 4.0.4 - Cross-Site Request Forgery
Mittel
CVE-2023-23640
MainWP UpdraftPlus Extension <= 4.0.6 - Missing Authorization to Arbitrary Plugin Activation
Hoch
CVE-2023-23661
MainWP Post Dripper Extension <= 4.0.4 - Missing Authorization to Arbitrary Page/Post Deletion
Mittel
CVE-2023-23748
MainWP White Label Extension <= 4.1.1 - Missing Authorization to Plugin Settings Change
Mittel
CVE-2023-22699
MainWP Wordfence Extension <= 4.0.7 - Missing Authorization to Arbitrary Plugin Activation
Hoch
CVE-2023-23653
MainWP File Uploader Extension <= 4.1 - Authenticated (Subscriber+) Arbitrary File Deletion
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.