Crítica
CVE-2023-51425
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtros
Alta
CVE-2023-51422
WebinarIgnition <= 3.05.0 - Authenticated(Subscriber+) PHP Object Injection
Media
CVE-2023-51517
Calculated Fields Form <= 1.2.28 - Authenticated (Contributor+) Open Redirect via Shortcode
Alta
CVE-2023-51470
Rencontre – Dating Site <= 3.11.1 - Authenticated (Subscriber+) PHP Object Injection
Media
CVE-2023-51522
Paid Member Subscriptions <= 2.10.4 - Cross-Site Request Forgery via ajax_add_log_entry
Media
CVE-2023-51528
GPT3 AI Content Writer <= 1.8.12 - Cross-Site Request Forgery
Media
CVE-2023-51682
MC4WP <= 4.9.9 - Missing Authorization via listen
Media
CVE-2023-51487
ARI Stream Quiz <= 1.2.32 - Cross-Site Request Forgery
Media
CVE-2023-51508
Database Cleaner <= 0.9.8 - Sensitive Information Exposure via Log File
Media
CVE-2023-51527
AI Power: Complete AI Pack – Powered by GPT-4 <= 1.8.1 - Missing Authorization to Sensitive Data Exposure
Media
CVE-2023-51695
Everest Forms <= 2.0.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-51408
WP Optin Wheel <= 1.4.2 - Sensitive Information Exposure via Log File
Crítica
CVE-2023-51424
WebinarIgnition <= 3.05.0 - Missing Authorization to Unauthenticated Privilege Escalation
Crítica
CVE-2023-51419
BERTHA AI Plugin <= 1.11.10.7 - Unauthenticated Arbitrary File Upload
Media
CVE-2023-51696
Spam protection, AntiSpam, FireWall by CleanTalk <= 6.20 - Cross-Site Request Forgery via apbct_settings__update_account_email
Media
CVE-2023-51414
EnvíaloSimple <= 2.1 Unauthenticated PHP Object Injection
Media
CVE-2023-51532
Icegram <= 3.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Message
Media
CVE-2023-51416
EnvíaloSimple <= 2.2 - Cross-Site Request Forgery
Alta
CVE-2023-51410
WP Mail Log Plugin <= 1.1.2 - Authenticated(Contributor+) Arbitrary File Upload
Media
CVE-2023-51377
Everest Forms <= 2.0.3 - Unauthorized Form Submission via Disabled Forms
Media
CVE-2023-51374
ZeroBounce Email Verification & Validation <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-51361
Sticky Chat Widget <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-51372
HashBar – WordPress Notification Bar <= 1.4.1 - Authenticated (Author+) Stored Cross-Site Scripting
Alta
CVE-2023-51355
WC Marketplace <= 4.0.23 - Missing Authorization via mvx_save_dashpages
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.