Crítica
CVE-2024-8030
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 115
Restablecer filtros
Crítica
CVE-2024-43917
TI WooCommerce Wishlist <= 2.8.2 - Unauthenticated SQL Injection
Crítica
CVE-2024-43132
Docket (WooCommerce Collections / Wishlist / Watchlist) < 1.7.0 - Unauthenticated SQL Injection
Media
CVE-2024-43131
Docket (WooCommerce Collections / Wishlist / Watchlist) < 1.7.0 - Missing Authorization to Unauthenticated Arbitrary Post/Page Deletion
Media
CVE-2024-37110
WishList Member X < 3.26.7 - Missing Authorization to Information Disclosure
Alta
CVE-2024-37107
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Privilege Escalation
Crítica
CVE-2024-37109
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Remote Code Execution
Alta
CVE-2024-37106
WishList Member X < 3.26.7 - Missing Authorization to Stored Cross-Site Scripting
Media
CVE-2024-37113
WishList Member X < 3.26.7 - Unauthenticated Information Exposure
Alta
CVE-2024-37108
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Arbitrary File Deletion
Crítica
CVE-2024-37112
WishList Member X <= 3.25.1 - Unauthenticated Arbitrary SQL Execution
Media
CVE-2024-37111
WishList Member X < 3.26.7 - Unauthenticated Denial of Service
Media
CVE-2024-34385
YITH WooCommerce Wishlist <= 3.32.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-34813
MC Woocommerce Wishlist <= 1.7.8 - Missing Authorization
Media
CVE-2024-34819
MC Woocommerce Wishlist <= 1.7.2 - Missing Authorization
Media
CVE-2024-29927
WishSuite <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-0512
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist
Media
CVE-2024-0513
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlist
Crítica
CVE-2024-23512
ProductX – WooCommerce Builder & Gutenberg WooCommerce Blocks <= 3.1.4 - PHP Object Injection via wopb_wishlist and wopb_compare
Media
CVE-2023-48761
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization
Alta
CVE-2023-48760
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action
Media
CVE-2023-48762
Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery
Media
CVE-2023-5230
TM WooCommerce Compare & Wishlist <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Crítica
82420667-9ba6-46ed-9a53-d16850755bb9
TI WooCommerce Wishlist <= 2.7.3 - Unauthenticated Blind SQL Injection via Rest API
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.