Alta
CVE-2023-3392
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtros
Media
CVE-2023-46313
Zotpress <= 7.3.4 - Reflected Cross-Site Scripting via 'PHP_SELF'
Media
CVE-2023-41953
ProfilePress <= 4.13.1 Cross-Site Request Forgery via 'admin_notice'
Alta
CVE-2023-41954
ProfilePress <= 4.13.1 - Limited Privilege Escalation via 'acceptable_defined_roles'
Media
d7d08bfd-9861-4e21-a696-25b00233ad94
EWWW Image Optimizer <= 7.2.0 - Sensitive Information Exposure
Media
CVE-2023-4757
Staff / Employee Business Directory for Active Directory <= 1.2.1 - Insufficient Escaping of Stored LDAP Values
Media
CVE-2023-5089
Defender Security <= 4.0.2 - Hide Login Page Feature Protection Bypass
Media
CVE-2023-28621
Wishful Blog <= 2.0.1 & Raise Mag <= 1.0.7 - Unauthenticated Cross-Site Scripting
Media
CVE-2023-41852
MailMunch – Grow your Email List <= 3.1.2 - Cross-Site Request Forgery
Media
CVE-2023-41805
Starter Templates <= 3.2.5 - Incorrect Authorization
Media
CVE-2023-41736
Email posts to subscribers <= 6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Crítica
CVE-2023-40555
Flatsome <= 3.17.5 - Unauthenticated PHP Object Injection
Media
CVE-2023-41853
WP iCal Availability <= 1.0.3 - Cross-Site Request Forgery
Baja
CVE-2023-41798
Directorist <= 7.7.1 - CSV Injection
Media
CVE-2023-41867
AcyMailing SMTP Newsletter <= 8.6.2 - Reflected Cross-Site Scripting
Media
CVE-2023-41735
Email posts to subscribers <= 6.2 - Missing Authorization to Sensitive Information Exposure
Media
CVE-2023-41731
wordpress publish post email notification <= 1.0.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-41804
Starter Templates <= 3.2.4 - Authenticated (Contributor+) Server-Side Request Forgery
Crítica
CVE-2023-25054
RSVPMaker <= 10.6.6 - Unauthenticated PHP Object Injection
Media
CVE-2023-41693
MyCryptoCheckout <= 2.125 - Cross-Site Request Forgery
Crítica
CVE-2023-4703
All in One B2B for WooCommerce <= 1.0.3 - Unauthenticated Privilege Escalation
Alta
CVE-2023-34383
WP Project Manager <= 2.6.0 - Authenticated (Subscriber+) SQL Injection
Crítica
CVE-2023-41652
RSVPMarker <= 10.6.6 - Unauthenticated SQL Injection
Media
CVE-2023-35037
Surfer <= 1.3.2.357 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.