Crítica
CVE-2024-31286
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Media
CVE-2024-31250
WP Server Health Stats <= 1.7.3 - Cross-Site Request Forgery
Media
CVE-2024-31253
OAuth Server <= 4.3.3 - Open Redirect
Media
CVE-2024-31287
Media Library Folders <= 8.1.8 - Authenticated (Author+) Directory Traversal
Alta
CVE-2024-31288
RapidLoad Power-Up for Autoptimize <= 2.2.11 - Unauthenticated Server-Side Request Forgery
Crítica
CVE-2024-31345
Auto Poster <= 1.2 - Authenticated (Administrator+) Arbitrary File Upload
Crítica
CVE-2024-3136
MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template
Crítica
CVE-2024-31231
Rehub <= 19.6.1 - Unauthenticated Local File Inclusion
Alta
CVE-2024-31232
Rehub <= 19.6.1 - Authenticated (Editor+) Local File Inclusion
Media
CVE-2024-2654
File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal
Media
CVE-2023-7253
Import WP – Export and Import CSV and XML files to WordPress <= 2.13.0 - Authenticated (Admin+) Server-Side Request Forgery
Alta
CVE-2024-3022
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.87 - Authenticated (Admin+) Arbitrary File Upload
Crítica
CVE-2024-31114
Shortcode Addons <= 3.2.5 - Authenticated (Admin+) Arbitrary File Upload
Alta
CVE-2024-30532
Builderall Builder for WordPress <= 2.0.1 - Unauthenticated Server-Side Request Forgery
Media
CVE-2024-30527
WP Express Checkout (Accept PayPal Payments) <= 2.3.7 - Unauthenticated Price Manipulation
Crítica
CVE-2024-31115
Chauffeur Taxi Booking System for WordPress <= 7.2 - Unauthenticated Arbitrary File Upload
Alta
CVE-2024-2047
ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw
Media
CVE-2024-24888
Gutenberg Blocks by Kadence Blocks <= 3.2.25 - Authenticated (Author+) Server-Side Request Forgery
Media
CVE-2024-30531
Nelio Content <= 3.2.0 - Authenticated (Contributor+) Server-Side Request Forgery
Alta
CVE-2023-6999
Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution
Crítica
CVE-2024-2411
MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal
Alta
CVE-2024-30453
Brave Popup Builder <= 0.6.5 - Unauthenticated Server-Side Request Forgery
Crítica
CVE-2024-30510
Salon booking system <= 9.5 - Unauthenticated Arbitrary File Upload
Crítica
CVE-2024-30500
CubeWP – All-in-One Dynamic Content Framework <= 1.1.12 - Authenticated (Subscriber+) Arbitrary File Upload
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.