Alta
CVE-2024-24844
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Media
CVE-2024-24837
FG Drupal to WordPress <= 3.67.0 - Cross-Site Request Forgery via ajax_importer
Media
CVE-2024-1209
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments
Media
CVE-2024-1210
LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API
Media
CVE-2024-24849
Quicksand Post Filter jQuery Plugin <= 3.1.1 - Cross-Site Request Forgery via renderAdmin
Media
CVE-2024-24846
Mighty Addons for Elementor <= 1.9.3 - Reflected Cross-Site Scripting
Crítica
CVE-2024-24842
Knowledge Base for Documentation, FAQs with AI Assistance <= 11.30.2 - Unauthenticated PHP Object Injection in is_article_recently_viewed
Media
CVE-2024-24835
BEAR <= 1.1.4 - Missing Authorization via Several Functions
Media
CVE-2024-24805
WP Dummy Content Generator <= 3.1.2 - Missing Authorization
Media
CVE-2024-24834
BEAR <= 1.1.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Plugin Options
Media
CVE-2024-24838
Five Star Restaurant Reviews <= 2.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Review URL
Media
CVE-2023-7203
Smart Forms <= 2.6.86 - Missing Authorization
Media
CVE-2024-0659
Easy Digital Downloads <= 3.2.6 - Authenticated(Shop Manager+) Stored Cross-Site Scripting via variable pricing options
Media
CVE-2024-24833
Happy Addons for Elementor <= 3.10.1 - Missing Authorization via add_row_actions
Media
CVE-2024-24832
EventPrime <= 3.3.9 - Improper Input Validation via save_event_booking
Media
CVE-2024-24840
Element Pack Elementor Addons <= 5.4.11 - Missing Authorization via bdt_duplicate_as_draft
Alta
CVE-2024-24869
Total Upkeep <= 1.15.8 - Improper Authorization to Unauthenticated Arbitrary File Download
Media
CVE-2024-24847
CalculatorPro Calculators <= 1.1.7 - Reflected Cross-Site Scripting via CP_preview_calc
Baja
CVE-2024-24754
Bref vulnerable to Body Parsing Inconsistency in Event-Driven Functions
Media
CVE-2024-24753
Bref Doesn't Support Multiple Value Headers in ApiGatewayFormatV2
Media
CVE-2024-24752
Bref's Uploaded Files Not Deleted in Event-Driven Functions
Alta
CVE-2024-24570
Statmic CMS vulnerable to account takeover via XSS and password reset link
Crítica
CVE-2024-24561
Vyper's bounds check on built-in `slice()` function can be overflowed
Media
CVE-2024-0969
ARMember <= 4.0.24 - Improper Access Control to Sensitive Information Exposure via REST API
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.