Alta
CVE-2021-4350
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtros
Alta
47ccda70-8c89-4e0f-a7fa-5b80515e60dc
WOWRestro – Online Ordering System For WooCommerce < 1.1 - Cross-Site Request Forgery
Alta
40d80e47-3411-4e70-8a20-2e698daad6e7
UpdraftPlus < 1.16.59 - Authenticated (Admin+) Local File Inclusion
Crítica
CVE-2021-24507
Astra Pro Addon <= 3.5.1 - Unauthenticated SQL Injection
Alta
CVE-2021-20779
WordPress Email Template Designer < 3.0.8 - Cross-Site Request Forgery
Alta
f9fe858e-5c89-4cc2-8b66-5c86965f7889
Travel Light <= 1.0 - Cross-Site Request Forgery
Alta
75e5e1eb-300f-4ddf-aec5-4fae9dba0f5d
Unlimited Category slider for WooCommerce <= 2.0.0 - Cross-Site Request Forgery
Media
55c586a0-bb91-4702-a9f2-d7503f247da3
Magic Post Thumbnail <= 3.3.6 - Reflected Cross-Site Scripting
Alta
53409aeb-67a6-4a44-993a-fb23f8fb1344
WooCommerce Extra Cost <= 2.6 - Cross-Site Request Forgery
Media
4f2eccc6-8e66-4235-aec3-9948b8753bf6
TNIT Filter Gallery Plugin <= 0.0.6 - Cross-Site Request Forgery to Cross-Site Scripting
Media
4d265120-992b-4138-b77a-1cf529e4d742
Haxcan <= 1.0.0 - Authenticated (Admin+) Path Traversal to Arbitrary File Read
Alta
3d0a709e-1514-43dd-8719-e9bdfdc610d2
NMI Gateway For WooCommerce <= 1.6.11 - Cross-Site Request Forgery
Alta
28c3b377-4cab-4c17-adc3-6ce8b600b20a
Woo MerchantX <= 1.0 - Cross-Site Request Forgery
Alta
CVE-2021-32789
WooCommerce Blocks < 5.5 - Authenticated Blind SQL Injection
Alta
CVE-2021-24500
Workreap < 2.2.2 - Cross-Site Request Forgery
Alta
9bb9bab2-4f47-41ed-b42e-5272981927a8
Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin <= 1.2.35.1 - Authorization Bypass
Alta
CVE-2021-24492
Handsome Testimonials & Reviews < 2.1.1 - Authenticated SQL Injection
Media
CVE-2021-24494
WP Offload SES Lite <= 1.4.4 - Stored Cross-Site Scripting
Crítica
CVE-2021-34622
ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
Crítica
CVE-2021-34624
ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload
Media
CVE-2021-24443
Youzify <= 1.0.6 - Stored Cross-Site Scripting
Crítica
CVE-2021-24472
QT KenthaRadio < 2.0.2 & OnAir2 < 3.9.9.2 - Server-Side Request Forgery & Remote File Inclusion
Media
CVE-2021-24464
YouTube Embed, Playlist and Popup <= 2.3.8 - Contributor+ Stored Cross-Site Scripting
Crítica
CVE-2021-34621
User Registration, User Profiles, Login & Membership – ProfilePress (Formerly WP User Avatar) 3.0.0 - 3.1.3 - Unauthenticated Privilege Escalation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.