Crítica
CVE-2024-38788
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtros
Crítica
CVE-2024-38773
FormLift for Infusionsoft Web Forms <= 7.5.17 - Unauthenticated SQL Injection
Media
CVE-2024-38769
Arconix Shortcodes <= 2.1.11 - Missing Authorization
Media
CVE-2024-38783
Arconix FAQ <= 1.9.4 - Missing Authorization
Alta
CVE-2024-6338
FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter
Crítica
CVE-2024-6457
HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection
Media
CVE-2024-6477
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP <= 1.2.11 - Unauthenticated Information Disclosure via Unprotected Directories
Alta
CVE-2024-6353
Wallet for WooCommerce <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'search[value]'
Media
CVE-2024-38756
Coming Soon <= 1.6.3 - Unauthenticated Information Exposure
Alta
CVE-2024-5325
Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_data
Alta
CVE-2024-38708
Barcode Scanner with Inventory & Order Manager <= 1.6.1 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2024-38749
Olive One Click Demo Import <= 1.1.2 - Unauthenticated Information Exposure
Media
CVE-2024-38742
MBE eShip <= 2.1.2 - Information Exposure
Media
CVE-2024-38702
Product Delivery Date for WooCommerce – Lite <= 2.7.2 - Missing Authorization
Crítica
CVE-2024-38755
DirectoryPress <= 3.6.10 - Authenticated (Contributor+) SQL Injection
Alta
CVE-2024-6666
WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id
Crítica
CVE-2024-38692
Spiffy Calendar <= 4.9.11 - Authenticated (Administrator+) SQL Injection
Media
CVE-2024-38691
Metorik – Reports & Email Automation for WooCommerce <= 1.7.1 - Cross-Site Request Forgery
Crítica
CVE-2024-37564
PayPlus Payment Gateway <= 7.0.7 - Authenticated (Subscriber+) SQL Injection
Crítica
CVE-2024-5975
CZ Loan Management <= 1.1 - Unauthenticated SQL Injection
Media
CVE-2024-37924
WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 <= 1.0.1 - Unauthenticated Information Exposure
Crítica
CVE-2024-5765
WpStickyBar – Sticky Bar, Sticky Header <= 2.1.0 - Unauthenticated SQL Injection
Media
CVE-2024-1287
Paid Memberships Pro - Member Directory Add On < 1.2.6 - Authenticated (Contributor+) Information Exposure
Crítica
CVE-2024-37933
Woocommerce OpenPos <= 6.4.4 - Unauthenticated SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.