Media
CVE-2024-1054
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Media
CVE-2024-25903
Frontend File Manager <= 22.7 - Sensitive Information Exposure via user uploads
Media
CVE-2024-25902
Malware Scanner <= 4.7.2 - Authenticated (Administrator+) SQL Injection
Media
CVE-2024-25101
Maspik – Spam blacklist <= 0.10.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Media
CVE-2024-1276
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-1322
Directorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change
Crítica
CVE-2024-25096
Canto <= 3.0.6 - Remote File Inclusion to Code Execution
Media
CVE-2024-1070
SiteOrigin Widgets Bundle <= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-25097
TNC PDF viewer <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Media
CVE-2024-1160
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link
Media
CVE-2024-25094
PJ News Ticker <= 1.9.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Crítica
CVE-2024-25912
MoveTo <= 6.2 - Missing Authorization to Unauthenticated Options Update
Media
CVE-2024-25908
WP Media folder <= 5.7.2 - Missing Authorization to Authenticated(Subscriber+) Title Modification
Media
CVE-2024-25597
Ultimate Reviews <= 3.2.8 - Unauthenticated stored Cross-Site Scripting via reviews
Media
CVE-2024-25591
WP Editor <= 1.2.7 - Sensitive Information Exposure via log file
Media
CVE-2024-25904
TinyMCE Professional Formats and Styles <= 1.1.2 - Cross-Site Request Forgery via bb_taps_backend_page
Media
CVE-2024-25914
SMTP Mail Plugin <= 1.3.20 - Cross Site Request Forgery
Media
CVE-2024-25915
Pexels: Free Stock Photos <= 1.2.2 - Authenticated (Contributor+) Server-Side Request Forgery
Crítica
CVE-2024-25913
MoveTo <= 6.2 - Unauthenticated Arbitrary File Upload
Media
CVE-2024-25598
Livemesh Addons for Elementor <= 8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via animated_text_class
Media
CVE-2024-1236
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-25905
Multi Step Form <= 1.7.18 - Cross-Site Request Forgery
Media
CVE-2024-25906
Comments Like Dislike <= 1.2.2 - IP Spoofing
Media
CVE-2024-1337
SKT Page Builder <= 4.1 - Missing Authorization to Authenticated(Subscriber+) Content Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.