Alta
CVE-2023-30496
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2023-47755
WooCommerce Product Carousel Slider <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Media
CVE-2023-47761
Simple 301 Redirects by BetterLinks <= 2.0.7 - Missing Authorization via clicked
Media
CVE-2023-47760
Essential Blocks for Gutenberg <= 4.2.0 - Missing Authorization via AJAX actions
Media
CVE-2023-5979
eCommerce Product Catalog for WordPress <= 3.3.25 - Cross-Site Request Forgery
Crítica
CVE-2023-5105
Frontend File Manager Plugin <= 22.5 - Authenticated (Editor+) Directory Traversal
Media
b3d4f658-e9ce-490b-bcaa-1061a463dbb2
Premmerce Redirect Manager <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-6532
WP Blogs' Planetarium <= 1.0 - Cross-Site Request Forgery to Settings Update
Media
CVE-2023-47756
Welcome Email Editor <= 5.0.5 - Missing Authorization via ajax_handler
Crítica
CVE-2023-6063
WP Fastest Cache <= 1.2.1 - Unauthenticated SQL Injection
Media
CVE-2023-4726
Ultimate Dashboard <= 3.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Media
CVE-2023-7297
TwitterPosts <= 1.0.2 - Cross-Site Request Forgery to Plugin Settings Update
Media
CVE-2023-5137
Simply Excerpts <= 1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2023-5874
Popup Box <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-5884
Word Balloon <= 4.20.2 - Cross-Site Request Forgery
Alta
501e9cd1-1187-4d01-a3cc-5edba64c391f
Image Compressor & Optimizer - iLoveIMG <= 1.0.5 - Authenticated (Administrator+) PHP Object Injection
Media
CVE-2023-5210
AMP+ Plus <= 3.0 - Reflected Cross Site Scripting
Media
CVE-2023-47757
AWeber <= 7.3.9 - Missing Authorization via AJAX actions
Media
CVE-2023-47759
Chaty <= 3.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Media
CVE-2023-6109
YOP Poll <= 6.5.26 - Race Condition to Vote Manipulation
Media
CVE-2023-47762
BetterDocs <= 2.5.2 - Missing Authorization via AJAX actions
Alta
CVE-2023-5108
Easy Newsletter Signups <= 1.0.4 - Authenticated (Admin+) SQL Injection
Media
2330b18e-0907-47e1-b91f-1fe466bcf76b
Sprout Invoices <= 20.5.3 - Sensitive Information Exposure
Media
CVE-2023-5809
Popup Box <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.