Media
CVE-2024-51713
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.601
Media
CVE-2024-51710
Responsive Data Table <= 1.3 - Reflected Cross-Site Scripting
Media
CVE-2024-51695
Fabrica Synced Pattern Instances <= 1.0.8 - Reflected Cross-Site Scripting
Media
CVE-2024-51701
MG Post Contributors <= 1.3 - Reflected Cross-Site Scripting
Media
CVE-2024-51785
Responsive Filterable Portfolio <= 1.0.22 - Server-Side Request Forgery
Media
CVE-2024-51718
Simple Modal <= 0.3.3 - Reflected Cross-Site Scripting
Media
CVE-2024-51702
SrcSet Responsive Images for WordPress <= 1.4 - Reflected Cross-Site Scripting
Media
CVE-2024-51692
Bing Search API Integration <= 0.3.3 - Reflected Cross-Site Scripting
Media
CVE-2024-51704
imPress <= 0.1.4 - Reflected Cross-Site Scripting
Media
CVE-2024-51703
WP-Basics <= 2.0 - Reflected Cross-Site Scripting
Media
CVE-2024-51707
WP Visual Adverts <= 2.3.0 - Reflected Cross-Site Scripting
Media
CVE-2024-10340
Shortcodes Blocks Creator Ultimate <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2024-51781
Firework Shoppable Live Video <= 6.3 - Reflected Cross-Site Scripting
Media
CVE-2024-51714
User Password Reset <= 1.0 - Reflected Cross-Site Scripting
Media
CVE-2024-51705
WP MMenu Lite <= 1.0.0 - Reflected Cross-Site Scripting
Media
CVE-2024-51784
FriendStore for WooCommerce <= 1.4.2 - Reflected Cross-Site Scripting
Media
CVE-2024-51780
eewee admin custom <= 1.8.2.4 - Reflected Cross-Site Scripting
Media
CVE-2024-10710
YaDisk Files <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2024-10114
Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider
Alta
CVE-2024-10263
Tickera – WordPress Event Ticketing <= 3.5.4.4 - Unauthenticated Arbitrary Shortcode Execution
Media
CVE-2024-9657
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Media
CVE-2024-10676
Conversion Helper <= 1.12 - Reflected Cross-Site Scripting
Alta
CVE-2024-10097
Loginizer Security and Loginizer <= 1.9.2 - Authentication Bypass via WordPress.com OAuth provider
Media
CVE-2024-6393
NextGEN Gallery <= 3.39.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.