Media
CVE-2024-5087
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtros
Media
CVE-2024-5481
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Path Traversal via esc_dir Function
Alta
CVE-2024-4887
Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2024-35748
WooCommerce Dropshipping <= 5.0.4 - Missing Authorization to Unauthenticated Arbitrary Email Send
Crítica
CVE-2024-35736
Visualizer <= 3.11.1 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2024-35709
The Plus Addons for Elementor Page Builder Lite <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-5607
GDPR CCPA Compliance & Cookie Consent Banner <= 2.7.0 - Missing Authorization to Settings Update and Stored Cross-Site Scripting
Media
CVE-2024-35712
Database Cleaner <= 1.0.5 - Authenticated (Admin+) Arbitrary File Read
Crítica
CVE-2024-35750
Gallery – Image and Video Gallery with Thumbnails <= 2.0.3 - Authenticated (Contributor+) SQL Injection
Media
CVE-2024-4354
TablePress – Tables in WordPress made easy <= 2.3 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind
Media
CVE-2024-34765
Sensei Pro (WC Paid Courses) <= 4.23.1.1.23.1 - Authenticated (Student+) Stored Cross-Site Scripting
Media
CVE-2024-35686
Sensei LMS <= 4.23.1 & Sensei Pro (WC Paid Courses) <= 4.24.0.1.24.0 - Missing Authorization
Media
CVE-2024-35716
Copymatic – AI Content Writer & Generator <= 1.9 - Missing Authorization
Media
CVE-2024-35754
Ovic Importer <= 1.6.3 - Authenticated (Subscriber+) Arbitrary File Download
Media
CVE-2024-35749
Under Construction / Maintenance Mode from Acurax <= 2.6 - Unauthenticated IP Spoofing
Media
CVE-2024-35742
Easy Forms for Mailchimp <= 6.9.0 - Missing Authorization
Media
CVE-2024-35724
Bosa Elementor Addons and Templates for WooCommerce <= 1.0.12 - Missing Authorization
Media
CVE-2024-35679
GiveWP – Donation Plugin and Fundraising Platform <= 3.12.0 - Reflected Cross-Site Scripting
Media
CVE-2024-5259
MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter
Crítica
CVE-2024-5153
Startklar Elementor Addons <= 1.7.15 - Unauthenticated Path Traversal to Arbitrary Directory Deletion
Media
CVE-2024-5449
WP Dark Mode – WordPress Dark Mode Plugin for Improved Accessibility, Dark Theme, Night Mode, and Social Sharing <= 5.0.4 - Missing Authorization
Alta
CVE-2024-5179
Cowidgets – Elementor Addons <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion
Alta
CVE-2024-5324
XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update
Crítica
CVE-2024-35677
MegaMenu <= 2.3.12 - Unauthenticated Local File Inclusion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.