Media
CVE-2024-0701
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Media
CVE-2024-0963
Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-24841
Add Customer for WooCommerce <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2024-1162
Orbit Fox by ThemeIsle <= 2.10.29 - Cross-Site Request Forgery
Media
CVE-2024-0954
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-1046
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-0844
Popup More <= 2.2.4 - Authenticated (Admin+) Directory Traversal to Limited Local File Inclusion
Media
CVE-2024-1047
ThemeIsle SDK <= Various Versions - Missing Authorization
Media
CVE-2024-0685
Ninja Forms Contact Form <= 3.7.1 - Unauthenticated Second Order SQL Injection
Media
CVE-2024-1073
SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2024-58379
nodemailer ReDoS when trying to send a specially crafted email
Media
CVE-2024-23637
OctoPrint Unverified Password Change via Access Control Settings
Media
ghsa-29w6-c52g-m8jc
C5 Firefly III CSV Injection.
Media
CVE-2024-24566
@lobehub/chat vulnerable to unauthorized access to plugins
Sin evaluar
CVE-2024-13243
drupal/entity_delete_log - SA-CONTRIB-2024-007
Media
CVE-2023-47116
Label Studio SSRF on Import Bypassing `SSRF_PROTECTION_ENABLED` Protections
Baja
CVE-2024-22236
Spring Cloud Contract vulnerable to local information disclosure
Media
CVE-2024-24799
WooCommerce Box Office <= 1.2.2 - Missing Authorization
Media
CVE-2023-7204
WP STAGING WordPress Backup Plugin < 3.2.0 - Sensitive Information Exposure via cache files
Media
CVE-2024-1130
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_read()
Media
CVE-2024-24804
MW WP Form <= 5.0.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Media
CVE-2023-6389
WordPress Toolbar Plugin <= 2.2.6 - Open Redirect via wptbto
Baja
CVE-2024-24710
Feed Them Social <= 4.2.0 - Cross-Site Request Forgery via review_nag_check
Media
CVE-2024-24708
W3SPEEDSTER <= 7.19 - Cross-Site Request Forgery via launch
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.