Media
343cbdda-2ec5-437f-b563-96c61663314d
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtros
Media
2a0381b1-9b63-41cb-8125-d22274b98867
GiveWP <= 2.25.1 - Cross-Site Request Forgery to Cross-Site Scripting via render_dropdown
Media
CVE-2022-40312
GiveWP <= 2.25.1 - Authenticated (Admin+) Server-Side Request Forgery via give_get_content_by_ajax_handler
Media
CVE-2023-1263
CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.6 - Information Exposure
Media
CVE-2023-7293
Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'check_mollie_account_details'
Alta
CVE-2023-0467
WP Dark Mode <= 4.0.7 - Authenticated (Subscriber+) Local File Inclusion via 'style'
Alta
CVE-2020-36666
Multiple E-plugins (Various Versions) - Authenticated (Subscriber+) Privilege Escalation
Media
CVE-2023-27429
Jetpack CRM <= 5.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-0772
OptinMonster <= 2.12.1 - Authenticated (Subscriber+) Sensitive Information Disclosure via Shortcode
Media
CVE-2023-27438
WP Translitera <= p1.2.5 - Cross-Site Request Forgery
Baja
CVE-2023-0219
FluentSMTP <= 2.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via Email Logs
Media
CVE-2023-0968
Watu Quiz <= 3.3.9 - Reflected Cross-Site Scripting
Media
CVE-2022-38141
Sales Report Email for WooCommerce <= 2.8.0 - Missing Authorization for Email Functionality
Media
c0e58807-bccc-469f-82c3-a4bbf088a626
Yoast SEO <= 20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2023-26525
Dokan <= 3.7.12 - Authenticated (Vendor+) SQL Injection
Media
CVE-2023-26523
Calculated Fields Form <= 1.1.120 - Cross-Site Request Forgery
Alta
CVE-2023-0631
Paid Memberships Pro <= 2.9.11 - Authenticated (Subscriber+) SQL Injection via Shortcodes
Alta
CVE-2023-23700
OceanWP <= 3.4.1 - Authenticated (Subscriber+) Local File Inclusion
Media
CVE-2023-26531
多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 <= 4.2.5 - Cross-Site Request Forgery
Media
CVE-2023-1022
WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation'
Media
CVE-2023-1027
WP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap'
Media
CVE-2023-0585
All in One SEO Pack <= 4.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-0586
All in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-25038
For the visually impaired <= 0.58 - Cross-Site Request Forgery to Plugin Settings Changes
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.