Media
CVE-2024-32718
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Media
CVE-2024-32812
Podlove Podcast Publisher <= 4.0.11 - Authenticated (Contributor+) Server-Side Request Forgery
Media
CVE-2024-32775
Embed Google Photos album <= 2.1.9 - Authenticated (Contributor+) Server-Side Request Forgery
Crítica
CVE-2024-32830
BuddyForms <= 2.8.8 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery
Alta
CVE-2024-1567
Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload
Crítica
CVE-2024-28890
Forminator <= 1.28.1 - Unauthenticated Arbitrary File Upload
Crítica
CVE-2024-3729
Frontend Admin by DynamiApps <= 3.19.4 - Improper Missing Encryption Exception Handling to Form Manipulation
Alta
CVE-2024-3813
tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Alta
CVE-2024-3849
Click to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2024-3812
Salient Core <= 2.0.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Alta
CVE-2024-3810
Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Crítica
CVE-2024-32680
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.5.2 - Authenticated (Subscriber+) Remote Code Execution
Crítica
CVE-2024-32599
WP Dummy Content Generator <= 3.2.1 - Unauthenticated Code Injection
Media
CVE-2023-6805
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.7 - Authenticated(Contributor+) Blind Server-Side Request Forgery (SSRF)
Media
CVE-2024-31229
Really Simple SSL <= 7.2.3 - Authenticated (Admin+) Server-Side Request Forgery
Crítica
CVE-2024-32514
Poll Maker <= 3.4 - Authenticated (Subscriber+) Arbitrary File Upload
Crítica
CVE-2024-32523
Mailster <= 4.0.6 - Unauthenticated Local File Inclusion
Media
CVE-2024-32454
Appointment Bookings for Zoom GoogleMeet and more – Wappointment <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery
Media
CVE-2024-32430
ActiveCampaign <= 8.1.14 - Authenticated (Administrator+) Server-Side Request Forgery
Alta
CVE-2023-6964
Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.1.26 - Authenticated(Contributor+) Server-Side Request Forgery (SSRF)
Crítica
CVE-2024-31292
Import XML and RSS Feeds <= 2.1.5 - Authenticated (Administrator+) Arbitrary File Upload
Alta
CVE-2024-31300
Easy Social Share Buttons <= 9.4 - Authenticated (Subscriber+) Local File Inclusion
Alta
CVE-2024-31280
Church Admin <= 4.1.5 - Authenticated (Subscriber+) Arbitrary File Upload
Crítica
CVE-2024-31266
Advanced Order Export For WooCommerce <= 3.4.4 - Authenticated (Shop Manager+) Remote Code Execution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.