Media
CVE-2024-2579
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtros
Alta
CVE-2024-1795
HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.2 - Authenticated (Contributor+) SQL Injection
Crítica
CVE-2024-27956
Automatic <= 3.92.0 - Unauthenticated SQL Injection
Alta
CVE-2023-7072
Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpoint
Alta
CVE-2024-0368
Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys
Media
CVE-2024-2107
Blossom Spa <= 1.3.3 - Sensitive Information Exposure
Alta
CVE-2024-1751
Tutor LMS – eLearning and online course solution <= 2.6.1 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2023-5663
News Announcement Scroll <= 9.0.0 - Authenticated (Contributor+) SQL Injection via Shortcode
Media
CVE-2024-1083
Simple Restrict <= 1.2.6 - Missing Authorization to Sensitive Information Exposure
Media
CVE-2024-2106
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route
Media
CVE-2023-7232
Backup and Restore WordPress WordPress <= 1.45 - Unauthenticated Information Exposure via Log Files
Media
CVE-2024-1381
Page Builder Sandwich – Front End WordPress Page Builder Plugin <= 5.1.0 - Sensitive Information Exposure
Media
CVE-2024-1088
Password Protected Store for WooCommerce <= 2.2 - Information Exposure via REST API
Media
CVE-2024-0378
AI Engine <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2024-1793
AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth By AWeber <= 7.3.14 - Authenticated (Admin+) SQL Injection
Crítica
CVE-2024-1981
WPvivid Backup and Migration <= 0.9.68 - Unauthenticated SQL Injection
Alta
CVE-2024-0786
Conversios <= 7.0.7 - Authenticated (Subscriber+) SQL Injection via ee_syncProductCategory
Alta
CVE-2024-1203
Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce <= 7.0.7 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2023-6922
Under Construction / Maintenance Mode from Acurax <= 2.6 - Authenticated (Subscriber+) Sensitive Information Exposure
Crítica
CVE-2024-1514
WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection
Media
CVE-2024-23523
Elementor Pro <= 3.19.2 - Authenticated (Contributor+) Information Exposure
Crítica
CVE-2024-1698
NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection
Media
CVE-2024-1435
Tainacan <= 0.20.6 - Unauthenticated Sensitive Information Exposure
Media
CVE-2024-1436
WooCommerce Coupon Popup, SmartBar, Slide In | MyShopKit <= 1.0.9 - Unauthenticated Sensitive Information Exposure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.