Media
CVE-2022-1465
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.822
Restablecer filtros
Alta
CVE-2022-1386
Fusion Builder <= 3.6.1 & Avada <= 7.6.1 - Unauthenticated Server-Side Request Forgery
Media
CVE-2022-0814
Ubigeo de Perú para Woocommerce y WordPress <= 3.6.3 - Unauthenticated SQL Injection
Media
3e471ef4-94c1-47d9-98ae-f79f7662e21a
Woocommerce Open Close – Best Business Schedules Manager <= 4.3.0 - Reflected Cross-Site Scripting
Alta
d52d3291-838a-4b23-b969-8c6273faec1e
Product Filter For WooCommerce Product <= 1.3.1 - Unauthenticated SQL Injection
Media
CVE-2022-0783
Multiple Shipping Address Woocommerce < 2.0 - Unauthenticated SQL Injection
Media
74d222b9-22e9-485d-8111-d3bee505b200
Wbcom Designs Plugins (Various Versions) - Arbitrary Plugin Installation, Activation and Deactivation
Alta
3aa537bc-90fa-4d87-9dd5-e32aef4273c7
Cart Link for WooCommerce <= 2.0.2 - Cross-Site Request Forgery
Media
CVE-2022-0948
Order Listener for WooCommerce – Play Sounds Instantly on New Orders <= 3.2.1 - Unauthenticated SQL Injection
Media
7c32d967-85b9-4c93-a948-0126efb78f39
WooCommerce < 5.7.0 & WooCommerce Admin < 2.6.4 - Information Disclosure
Media
9c7edcbd-83b8-405b-892a-c404947990b3
افزونه پیامک ووکامرس Persian WooCommerce SMS <= 4.4.0 - Cross-Site Scripting and SQL Injection
Media
61aaeca4-6b5c-4b00-ab71-bba976d9e1b5
Lucky Wheel for WooCommerce – Spin a Sale <= 1.0.10 - Cross-Site Scripting
Crítica
CVE-2022-1020
Product Table for WooCommerce <= 3.1.2 - Missing Authorization
Alta
CVE-2022-0989
NS WooCommerce Watermark <= 2.11.3 - Abuse of Functionality
Media
2ed1f200-5a27-4905-ac88-394b214bb430
WooCommerce < 6.3.1 - Unauthorized Order Status Change
Alta
CVE-2021-25068
Sync WooCommerce Product feed to Google Shopping <= 1.2.4 - Authenticated (Admin+) SQL Injection
Media
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Alta
CVE-2022-0818
WooCommerce Affiliate Plugin - Coupon Affiliates < 4.16.4.5 - Stored Cross-Site Scripting
Media
CVE-2022-0397
WPC Smart Wishlist for WooCommerce <= 2.9.3 - Reflected Cross-Site Scripting
Alta
36dec90a-fead-48f5-a88b-dfbc6d8bffb4
NotificationX <= 2.3.11 - SQL Injection
Alta
5cbf597e-7a2f-416c-8969-3679b487f57a
WooCommerce <= 6.2.0 - Path Traversal via Tax Importer
Media
CVE-2022-0775
WooCommerce <= 6.2.0 - Incorrect Authorization Checks on REST API Endpoints
Alta
CVE-2022-0478
Event Manager and Tickets Selling for WooCommerce < 3.5.8 - SQL Injection
Media
CVE-2021-24940
Persian WooCommerce <= 5.8.0 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.