Crítica
ec9cd4a8-286e-43d7-8cb6-6cc363800e20
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtros
Media
CVE-2020-8934
Site Kit by Google <= 1.7.1 - Sensitive Information Disclosure
Alta
06bc7a24-eafc-4b06-852e-9b596f107805
Contact Form by WPForms <= 1.6.0.1 - Cross-Site Scripting
Media
CVE-2020-5579
Paid Memberships Pro < 2.3.3 - Authenticated SQL Injection
Media
CVE-2020-12832
Simple File List <= 4.2.7 - Arbitrary File Deletion
Media
CVE-2020-12742
iubenda < 2.3.5 - Failure to Restrict URL Protocol
Media
CVE-2020-11027
WordPress Core < 5.4.1 - Password Reset Link Non-Expiration
Media
CVE-2020-12462
Ninja Forms Contact Form <= 3.4.24.1 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
Media
CVE-2020-11930
GTranslate <= 2.8.51 - Reflected Cross Site Scripting
Media
138e0a38-c922-44d1-9fe6-2439ec32cf39
Rank Math SEO <= 1.0.42.1 - Missing Authorization
Alta
CVE-2020-11509
WP Lead Plus X <= 0.98 - Stored Cross-Site Scripting
Media
CVE-2020-11508
WordPress Landing Page – Squeeze Page – Responsive Landing Page Builder Free – WP Lead Plus X <= 0.98 - Authenticated Stored Cross-Site Scripting
Media
CVE-2020-15537
Vanguard - Marketplace Digital Products PHP7 <= 2.1 - Cross-Site Scripting
Alta
CVE-2020-5391
Login by Auth0 <= 3.11.3 - Cross-Site Request Forgery
Crítica
CVE-2020-7947
Login by Auth0 <= 3.11.3 - CSV Injection
Media
a7d0deb3-3d04-4f85-b769-0894d7c6ee7c
Easy Forms for Mailchimp <= 6.6.2 - Authenticated Cross-Site Scripting
Crítica
CVE-2020-11514
Rank Math SEO <= 1.0.40.2 - Privilege Escalation via Unprotected REST API Endpoint
Alta
CVE-2020-11515
Rank Math SEO <= 1.0.40.2 - Redirect Creation via Unprotected REST API Endpoint
Crítica
CVE-2022-0888
Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload
Alta
08115f30-f38b-4c13-803e-5de873f83a17
Custom Post Type UI <= 1.7.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
e91e6101-bd30-4cf1-9a39-23218c3bff6f
Newsletter <= 6.5.3 - CSV Injection
Alta
CVE-2020-7916
LearnPress <= 3.2.6.6 - Privilege Escalation
Alta
CVE-2020-28978
Canto <= 1.9.0 - Blind Server-Side Request Forgery via tree.php
Media
CVE-2020-10195
Popup Builder <= 3.63 - Authenticated Settings Modification, Configuration Disclosure, and User Data Export
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.