Alta
CVE-2024-4887
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2024-5425
WP jQuery Lightbox <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Attribute
Media
CVE-2024-5658
Improper Authentication in CraftCMS two factor authentication plugin
Baja
CVE-2024-5657
Password hash exposed in CraftCMS two factor authentication plugin
Crítica
CVE-2024-3592
Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection
Crítica
CVE-2024-35746
BuddyPress Cover <= 2.1.4.2 - Unauthenticated Arbitrary File Upload
Media
CVE-2024-35748
WooCommerce Dropshipping <= 5.0.4 - Missing Authorization to Unauthenticated Arbitrary Email Send
Media
CVE-2024-35720
Album Gallery – WordPress Gallery <= 1.5.7 - Missing Authorization
Media
CVE-2024-1988
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-5382
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modification
Media
CVE-2024-35751
Woody code snippets – Insert Header Footer Code, AdSense Ads <= 2.5.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-35711
Theme <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-35714
Idyllic <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-35691
Widget Options - Extended <= 5.1.0 & Widget Options <= 4.0.1 - Authenticated (Subscriber+) Information Disclosure
Media
CVE-2024-35729
Tickera <= 3.5.2.6 - Missing Authorization
Media
CVE-2024-35744
Upunzipper <= 1.0.0 - Authenticated (Admin+) Arbitrary File Deletion
Media
CVE-2024-35731
Kenta Blocks – Responsive Blocks and block templates library <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-4488
Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-35705
Block for Font Awesome <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2024-5637
Market Exporter <= 2.0.19 - Missing Authorization to Arbitrary File Deletion
Media
CVE-2023-6491
Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification
Media
CVE-2024-35683
Leyka <= 3.31.1 - Missing Authorization
Crítica
CVE-2024-35736
Visualizer <= 3.11.1 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2024-35709
The Plus Addons for Elementor Page Builder Lite <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.