Media
402bbe9c-cf4d-457c-97ac-149e14ea6f47
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 146
Restablecer filtros
Alta
3166549e-b52e-41e8-8b5c-1a1a0558c858
BuddyPress <= 7.2.1 - Insufficient Privilege De-escalation
Media
15b4b132-1e27-454d-9ba0-9d1a552e1844
BuddyPress <= 7.2.1 - Missing Authorization to Group Creation
Media
04601634-d707-44a7-9b5f-46c4b9687469
BuddyPress <= 7.2.0 - Authorization Bypass to Friend Invite
Media
5d7bcd71-e299-47fe-a749-e72c49b8129e
BuddyPress - 7.0.0 - 7.2.0 - Insufficient Privilege De-escalation
Alta
CVE-2021-21389
BuddyPress 5.0.0-7.2.0 - Privilege Escalation via REST API
Media
001a7d43-4b00-42e9-bb0c-94a9d5721166
BuddyPress <= 7.2.0 - Authorization Bypass to Private Message Disclosure
Media
4bd169bc-1538-400f-b2cd-0bbcf1fea7ee
BuddyPress <= 6.3.0 - Insufficient Input Validation
Alta
CVE-2020-5244
BuddyPress <= 5.1.1 - Sensitive Information Disclosure
Media
ed5cf097-1b27-4d20-b7b2-2aa909bce042
BuddyPress <= 5.1.0 - Denial of Service
Alta
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Media
dcd463de-ae26-4477-89e1-21f4aada1e86
BuddyPress Xprofile Custom Fields Type <= 2.6.3 - Arbitrary File Deletion
Media
CVE-2017-1000227
Salutation < 3.0.16 - Authenticated Stored Cross-Site Scripting
Media
CVE-2017-6954
BuddyPress Docs <= 1.9.2 - Authorization Bypass
Crítica
5a3e2d1c-8879-4def-8861-3d6d8b683b7e
BuddyPress 2.0 - 2.7.3 - Unauthenticated Arbitrary File Deletion
Crítica
be97e1ca-6c9c-4641-ba7c-bbb14a58d99e
rtMedia for WordPress, BuddyPress and bbPress <= 4.2 - Arbitary File Upload
Media
7b19b0b2-d6cb-4d92-9925-c77d517ddfb7
rtMedia for WordPress, BuddyPress and bbPress <= 3.10.1 - Cross-Site Scripting
Alta
9bed2e86-1cc0-4fed-a44f-0c495c423e22
BuddyPress <= 2.3.4 - Privilege Escalation
Alta
CVE-2015-9455
BuddyPress Activity Plus <= 1.5 - Cross-Site Request Forgery
Alta
98527ebf-26a3-4900-84b5-3d2245783e8e
BuddyPress BP Gallery Plus <= 1.2.5 - Cross-Site Scripting
Crítica
9ba74e58-0647-4283-9fa3-428976c54474
rtMedia for WordPress, BuddyPress and bbPress < 3.7.40 - SQL Injection
Crítica
1814ad55-0807-4def-b584-6dbbc5d6eb72
rtMedia for WordPress, BuddyPress and bbPress <= 3.9.5 - Local File Inclusion
Media
CVE-2014-1888
BuddyPress <= 1.9.1 - Stored Cross-Site Scripting
Media
CVE-2014-1889
BuddyPress <= 1.9.1 - Authorization Bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.