Crítica
CVE-2024-34555
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Alta
CVE-2024-2662
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection
Alta
CVE-2024-4397
LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Upload
Alta
CVE-2024-3808
Porto Theme - Functionality <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Alta
CVE-2024-3809
Porto Theme - Functionality <= 3.0.9 - Authenticated (Contributor+) Local File Inclusion via Post Meta
Media
CVE-2024-1467
Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.1.6 - Authenticated (Contributor+) Server-Side Request Forgery
Crítica
CVE-2024-3806
Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts
Alta
CVE-2024-3807
Porto <= 7.1.0 - Authenticated (Contributor+) Local File Inclusion via Post Meta
Crítica
CVE-2024-31377
WP Photo Album Plus <= 8.7.01.001 - Unauthenticated Arbitrary File Upload
Alta
CVE-2024-34552
Stockholm <= 9.6 - Authenticated (Contributor+) Local File Inclusion
Crítica
CVE-2024-34551
Stockholm <= 9.6 - Unauthenticated Local File Inclusion
Crítica
CVE-2024-34440
AI Engine: ChatGPT Chatbot <= 2.2.63 - Authenticated (Editor+) Arbitrary File Upload
Alta
CVE-2024-4441
XML Sitemap & Google News <= 5.4.8 - Unauthenticated Local File Inclusion
Alta
CVE-2024-34554
Stockholm Core <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
Crítica
CVE-2024-4393
Social Connect <= 1.2 - Authentication Bypass
Crítica
CVE-2024-34416
Pk Favicon Manager <=2.1 - Authenticated (Admin+) Arbitrary File Upload
Crítica
CVE-2024-34411
canvasio3D Light <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload
Crítica
CVE-2024-4345
Startklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File Upload
Alta
CVE-2024-34384
Sina Extension for Elementor <= 3.5.1 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2024-4033
All-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured image
Alta
CVE-2024-2663
ZD YouTube FLV Player <= 1.2.6 - Server-Side Request Forgery
Alta
CVE-2024-33913
Xserver Migrator <= 1.6.2 - Cross-Site Request Forgery to Arbitrary File Upload
Media
CVE-2024-0216
Google Doc Embedder <= 2.6.4 - Authenticated (Contributor+) Blind Server Side Request Forgery
Media
CVE-2024-3107
Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversal
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.