Media
CVE-2024-30559
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Media
CVE-2024-2140
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widget
Media
CVE-2024-1051
List category posts <= 0.89.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2024-2086
Integrate Google Drive <= 1.3.8 - Missing Authorization to Unauthenticated Settings Modification and Export
Media
CVE-2024-2847
WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Crítica
CVE-2024-31116
10Web Map Builder for Google Maps <= 1.0.74 - Authenticated (Administrator+) SQL Injection
Media
CVE-2024-31086
Change default login logo,url and title <= 2.0 - Cross-Site Request Forgery
Media
CVE-2024-31099
Shortcodes and extra features for Phlox theme <= 2.15.8 - Missing Authorization
Crítica
CVE-2024-31114
Shortcode Addons <= 3.2.5 - Authenticated (Admin+) Arbitrary File Upload
Media
CVE-2024-30557
Aesop Story Engine <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-31091
Custom Field Bulk Editor <= 1.9.1 - Reflected Cross-Site Scripting
Media
CVE-2024-2142
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Table Widget
Media
CVE-2024-31098
New Order Notification for Woocommerce <= 2.0.2 - Missing Authorization
Media
CVE-2024-31101
AI Twitter Feeds (Twitter widget & shortcode) <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-30544
Whizzy <= 1.1.18 - Missing Authorization
Media
CVE-2024-2794
Gutenberg Block Editor Toolkit – EditorsKit <= 1.40.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2024-31094
Filter Custom Fields & Taxonomies Light <= 1.05 - Authenticated (Contributor+) PHP Object Injection
Media
CVE-2024-30555
Ultimate Social Comments – Email Notification & Lazy Load <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-2974
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure
Media
CVE-2024-31108
iFlyChat – WordPress Chat <= 4.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-31089
Platinum SEO <= 2.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2024-30529
Tainacan <= 0.20.7 - Missing Authorization
Media
CVE-2024-31090
Hacklog Down As PDF <= 2.3.6 - Reflected Cross-Site Scripting
Media
CVE-2024-31117
WooCommerce Bookings Calendar <= 1.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.