Alta
CVE-2024-8704
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 59
Restablecer filtros
Alta
CVE-2024-7770
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload
Alta
CVE-2024-7627
Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition
Alta
CVE-2024-7559
File Manager Pro <= 8.3.7 - Authenticated (Subscriber+) Arbitrary File Upload
Alta
CVE-2023-7062
Advanced File Manager Shortcodes <= 2.4 - Authenticated (Contributor+) Directory Traversal
Alta
CVE-2023-7061
Advanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File Upload
Alta
CVE-2024-5598
Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing
Media
CVE-2024-37254
File Manager <= 7.2.7 - Missing Authorization
Media
CVE-2024-2654
File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal
Alta
CVE-2024-1538
File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion
Crítica
CVE-2023-6825
File Manager And File Manager Pro (Multiple Versions) - Directory Traversal
Media
CVE-2023-7015
File Manager Pro <= 8.3.4 - Reflected Cross-Site Scripting
Alta
CVE-2023-6846
File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload
Alta
CVE-2024-0761
File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames
Baja
CVE-2023-5907
File Manager <= 6.3 - Authenticated (Admin+) Arbitrary OS File Access via Path Traversal
Media
CVE-2023-3814
Advanced File Manager <= 5.1 - Authenticated (Administrator+) Arbitrary File and Folder Access
Crítica
CVE-2023-2068
File Manager Advanced Shortcode WordPress <= 2.3.2 - Unauthenticated Arbitrary File Upload to Remote Code Execution via Shortcode
Alta
CVE-2022-47599
Bit File Manager <= 5.2.7 - Authenticated (Admin+) PHP Object Injection
Alta
CVE-2022-0403
Bit File Manager – 100% free file manager for WordPress <= 5.2.2 - Subscriber+ Arbitrary File Creation/Upload/Deletion
Media
CVE-2021-24177
WP File Manager <= 7.0 - Reflected Cross-Site Scripting
Alta
CVE-2020-35235
Secure File Manager < 2.8.2 - Remote Code Execution
Crítica
Explotada en ataques
CVE-2020-25213
File Manager <= 6.8 - Arbitrary File Upload/Remote Code Execution
Alta
CVE-2020-24312
WP File Manager <= 6.4 - Unauthenticated Resource Access to Site Backups
Media
077b3483-ab1c-401d-aa67-c4da5fca90b4
File Manager <= 4.8 - Missing Authorization on AJAX Actions
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.