Alta
CVE-2022-2357
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtros
Alta
CVE-2022-2356
Frontend File Manager & Sharing – User Private Files <= 1.1.2 - Subscriber+ Arbitrary File Upload
Media
CVE-2022-2189
WP Video Lightbox <= 1.9.4 - Reflected Cross-Site Scripting
Alta
CVE-2022-1565
Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload
Media
45f3568c-b6d9-4d00-a8cd-571443d80fd3
Memory Usage, Memory Limit, PHP and Server Memory Health Check and Fix Plugin <= 2.43 - Cross-Site Scripting
Media
CVE-2022-2187
Contact Form 7 Captcha <= 0.1.1 - Reflected Cross-Site Scripting
Media
35b46587-1c6e-4d3f-a8d0-e7797cee882d
GTM Server Side <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
69ec31f3-8ec8-40ad-ba7f-77f9132ad51f
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.0.8 - Server-Side Request Forgery
Alta
CVE-2022-1952
Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC <= 1.1.15 - Arbitrary File Upload
Alta
CVE-2022-1751
Skitter Slideshow <= 2.5.2 - Unauthenticated Server-Side Request Forgery
Alta
CVE-2022-2083
Simple Single Sign On <= 4.1.1 - Insecure OAuth Implementation to Authentication Bypass
Crítica
CVE-2022-1574
HTML2WP <= 1.0.0 - Arbitrary File Upload
Media
CVE-2022-1977
WP Ultimate CSV Importer <= 6.5.2 - Server-Side Request Forgery
Media
ef7d7378-fa94-4964-916b-a41f69866d76
VS Contact Form <= 11.5 - Reflected Cross-Site Scripting
Media
CVE-2022-1756
Newsletter – Send awesome emails from WordPress <= 7.4.4 - Reflected Cross-Site Scripting
Crítica
CVE-2022-1765
Hot Linked Image Cacher <= 1.16 - Cross-Site Request Forgery
Media
CVE-2022-0779
User Meta – User Profile Builder and User management plugin <= 2.4.3 - Path Traversal
Media
a10da173-9b88-4599-928d-71fc42b35c50
WPify Woo Czech <= 3.5.6 - Reflected Cross-Site Scripting
Alta
79a41b84-2e19-46eb-9f6b-5155da0b15cc
Google Tag Manager for WordPress <= 1.15 - Cross-Site Scripting via Cloudflare Country Code
Alta
4c298a24-b68b-450e-b823-f91841046783
3CX Live Chat <= 9.4.2 - Local File Inclusion
Media
a4c21c56-c424-4667-a281-fa9e7241d8ad
Better Click To Tweet <= 5.10.1 - Reflected Cross-Site Scripting
Media
CVE-2022-1390
Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File Read
Alta
CVE-2022-1386
Fusion Builder <= 3.6.1 & Avada <= 7.6.1 - Unauthenticated Server-Side Request Forgery
Media
CVE-2022-1398
External Media without Import <= 1.1.2 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.