Media
228a3c72-fbb0-48bc-8066-6ca954a14421
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 146
Restablecer filtros
Media
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Media
23924342-3b1d-4360-bd87-104091283e35
BuddyBuilder - BuddyPress Builder for Elementor <= 1.7.3 - Cross-Site Request Forgery
Media
CVE-2023-28694
Wbcom Designs – BuddyPress Activity Social Share <= 3.5.0 - Cross-Site Request Forgery
Media
CVE-2023-0059
Youzify <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
84003388-c47c-41db-8d2d-4643aa375a89
Appsero <= 1.2.1 - Missing Authorization
Media
CVE-2022-47150
Appsero <= 1.2.0 - Cross-Site Request Forgery
Media
CVE-2022-45075
Activity Reactions For Buddypress <= 1.0.22 - Missing Authorization
Alta
CVE-2022-45074
Activity Reactions For Buddypress <= 1.0.22 - Cross-Site Request Forgery
Media
c5203a17-cc4f-4545-a231-dfbfb900f0fd
BuddyPress xProfile Checkout Manager for WooCommerce <= 1.3.5 - Stored Cross-Site Scripting
Crítica
CVE-2022-1950
Youzify <= 1.1.9 - SQL Injection
Media
CVE-2022-2108
Wbcom Designs – BuddyPress Group Reviews <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass
Media
dbbd9eda-756b-4fa7-b7b6-d91181cc80d6
BuddyForms Members <= 1.4.21 - Cross-Site Scripting
Media
0a49d74a-01a6-4bd9-bc93-0006f9fe9503
BuddyForms Hook Fields <= 1.3.8 - Cross-Site Scripting
Media
8d7de93c-f642-4870-b2f9-5070fdccd26b
Wbcom Designs – BuddyPress Group Reviews <= 2.8.1 - Cross-Site Scripting
Media
74d222b9-22e9-485d-8111-d3bee505b200
Wbcom Designs Plugins (Various Versions) - Arbitrary Plugin Installation, Activation and Deactivation
Media
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Alta
87b26fcf-d0b3-4ab3-92d8-8f1ba72af0a3
BuddyPress <= 9.0.0 - Information Disclosure via REST API
Crítica
40765cfe-a60a-44dc-8cdb-f9c8e42654c3
BuddyPress <= 9.0.0 - SQL Injection
Alta
b910b678-5869-43e6-8993-fcf53fe4c66f
BuddyPress Customer.io Analytics Integration <= 1.1.6 - Cross-Site Request Forgery
Media
CVE-2021-24443
Youzify <= 1.0.6 - Stored Cross-Site Scripting
Media
CVE-2021-24407
Jannah <= 5.4.4 - Reflected Cross-Site Scripting
Media
CVE-2021-24364
Jannah - Newspaper Magazine News BuddyPress AMP < 5.4.4 - Reflected Cross-Site Scripting
Media
d0ca9780-8918-40ff-80c0-62ce483adbae
BuddyPress <= 7.2.1 - Missing Authorization to Unauthorized Group Access
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.