Crítica
CVE-2023-51700
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtros
Media
CVE-2023-51401
Ultimate Addons for Beaver Builder <= 1.35.13 - Authenticated(Contributor+) Directory Traversal to Arbitrary File Download
Media
CVE-2023-50897
Media File Renamer <= 5.7.7 - Authenticated(Administrator+) Remote Code Execution
Media
CVE-2023-6290
SEOPress – On-site SEO <= 7.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Crítica
CVE-2023-6049
Estatik Real Estate Plugin <= 4.1.0 - Unauthenticated PHP Object Injection
Media
CVE-2024-0248
EazyDocs 2.3.8 - 2.3.9 - Missing Authorization
Crítica
CVE-2023-6623
Essential Blocks <= 4.4.2 - Unauthenticated Local File Inclusion
Alta
CVE-2023-6620
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.6 - Authenticated (Administrator+) SQL Injection
Media
CVE-2023-50857
Automation By Autonami <= 2.6.1 - Authenticated(Administrator+) SQL Injection
Crítica
CVE-2023-50839
JS Help Desk <= 2.8.1 - Unauthenticated SQL Injection via email and trackingid
Media
CVE-2023-50844
Mail logging – WP Mail Catcher <= 2.1.3 - Authenticated(Administrator+) SQL Injection
Media
CVE-2023-6855
Paid Memberships Pro <= 2.12.5 - Missing Authorization via API
Media
CVE-2023-4925
Easy Forms for Mailchimp <= 6.8.10 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2023-50843
Clockwork SMS Notfications <= 3.0.4 - Authenticated(Administrator+) SQL Injection
Media
CVE-2023-6555
Email Subscription Popup <= 1.2.19 - Reflected Cross-Site Scripting
Media
CVE-2023-6042
Getwid – Gutenberg Blocks <= 2.0.2 - Improper Input Validation to Arbitrary Email Sending to Admin
Media
CVE-2023-6583
Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality
Media
CVE-2023-6496
Manage Notification E-mails <= 1.8.5 - Missing Authorization
Media
CVE-2023-40003
WP Project Manager <= 2.6.7 - Missing Authorization
Media
CVE-2023-49860
WP Project Manager <= 2.6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2023-50373
Alt Manager <= 1.6.1 - Missing Authorization
Media
CVE-2023-49851
Square Thumbnails <= 1.1.0 - Missing Authorization
Crítica
CVE-2024-31211
WordPress Core 6.4.0 - 6.4.1 - Remote Code Execution POP Chain
Media
CVE-2023-49842
Rocket Maintenance Mode & Coming Soon Page <= 4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.