Media
CVE-2024-32726
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtros
Media
CVE-2024-32780
VikRentCar Car Rental Management System <= 1.3.2 - Information Exposure
Alta
CVE-2024-32706
ARforms <= 6.4 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2024-32811
USPS Shipping for WooCommerce – Live Rates <= 1.9.4 - Sensitive Information Exposure
Crítica
CVE-2024-32710
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Authenticated (Contributor+) SQL Injection
Media
CVE-2024-32953
Newsletters <= 4.9.5 - Information Exposure via Log files
Crítica
CVE-2024-32709
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Unauthenticated SQL Injection
Alta
CVE-2024-3293
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode
Media
CVE-2024-3601
Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Email Enumeration
Crítica
CVE-2024-31077
Forminator <= 1.29.2 - Authenticated (Admin+) SQL Injection
Media
CVE-2024-1076
SSL Zen – Free Let's Encrypt SSL Certificate & HTTPS/SSL Redirect WordPress Plugin <= 4.5.0 - Sensitive Information Exposure
Media
CVE-2024-32686
Backup Migration <= 1.4.3 - Information Exposure via Log Files
Media
CVE-2024-32678
TrackShip for WooCommerce <= 1.7.5 - Missing Authorization
Media
CVE-2024-0615
Content Control <= 2.1.0 - Missing Authorization to Sensitive Information Exposure
Crítica
CVE-2024-32602
WooCommerce Multilingual & Multicurrency with WPML <= 5.3.3.1 - Authenticated (Shop Manager+) SQL Injection
Crítica
CVE-2024-32551
SP Project & Document Manager <= 4.71 - Authenticated (Author+) SQL Injeciton
Alta
CVE-2023-6214
HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products
Crítica
CVE-2024-2876
Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection
Media
CVE-2024-32506
Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress <= 2.0.73 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
Alta
CVE-2024-3067
WooCommerce Google Feed Manager <= 2.4.2 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting
Media
CVE-2024-32145
WP Google Analytics Events <= 2.8.0 - Reflected Cross-Site Scripting
Crítica
CVE-2024-32139
Podlove Podcast Publisher <= 4.0.12 - Authenticated (Contributor+) SQL Injection
Crítica
CVE-2024-32137
User Activity Log Pro <= 2.3.4 - Authenticated (Subscriber+) SQL Injection
Crítica
CVE-2024-32135
Disable Comments | WPZest <= 1.51 - Authenticated (Administrator+) SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.