Alta
CVE-2022-2256
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtros
Media
CVE-2022-0594
Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic <= 9.7.5 - Information Disclosure
Media
CVE-2022-30536
WP Maintenance <= 6.0.7 - Authenticated (Admin+) Cross-Site Scripting
Alta
CVE-2022-2133
OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Authentication Bypass
Media
bb929679-85bb-4d5b-9a99-e6081d55019f
miniOrange's Google Authenticator <= 5.5.7 - Reflected Cross-Site Scripting
Crítica
CVE-2022-1609
The School Management Pro <= 9.9.6 - Remote Code Execution
Crítica
CVE-2022-34858
OAuth 2.0 client for SSO <= 1.11.3 - Authentication Bypass
Crítica
a10ba041-ded4-41d4-93ba-7fa7389acd54
WordPress OpenID Connect Client <= 2.1.7 - Authentication Bypass
Crítica
5d07d5e9-be7c-4c16-b931-d909ed8be361
Login with WHMCS <= 1.11.3 - Authentication Bypass
Crítica
7c3ae610-44ef-4354-b085-00c00a486dc9
Login with Cognito <= 1.4.6 - Authentication Bypass
Media
a8a3ba35-3cc0-4a6b-bb96-6ae5a83e5ad6
MainWP Dashboard <= 4.2.4.1 - Cross-Site Request Forgery
Media
d3004699-3285-426a-8a85-33be6c0c0b6f
Print My Blog – Print, PDF, & eBook Converter <= 3.15.8 - Unprotected AJAX Actions
Alta
CVE-2022-1576
WP Maintenance Mode & Coming Soon <= 2.4.4 - Cross-Site Request Forgery
Alta
b536028d-4e11-4bda-8097-b37857a28309
Thumbnail For Excerpts <= 2.1 - Cross-Site Request Forgery
Media
CVE-2022-2117
GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure
Alta
69ec31f3-8ec8-40ad-ba7f-77f9132ad51f
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.0.8 - Server-Side Request Forgery
Alta
CVE-2022-1938
Awin Data Feed <= 1.7 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2022-1937
Awin Data Feed <= 1.7 - Reflected Cross-Site Scripting
Media
CVE-2022-2108
Wbcom Designs – BuddyPress Group Reviews <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass
Media
fe4171b9-b17e-4e6e-9ab4-4b1b125e8950
Lana Email Tester <= 1.0.0 - Missing Authorization to Mail Relay & Cross-Site Request Forgery
Crítica
df46b3d5-a433-47b5-99b8-117591f7dd16
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.10 - Code Injection
Crítica
d7f024c5-80d8-490f-b448-9bccb877024b
Premium Courses & eLearning <= 1.0.5 - SQL Injection
Media
86f3c549-2cdd-4294-bc62-0892e94ddbb7
Qubely <= 1.7.9 - Incorrect Authorization
Media
CVE-2021-25056
Ninja Forms Contact Form <= 3.6.9 - Cross-Site Scripting via field label
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.