Media
CVE-2023-5737
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2023-5641
Martins Free & Easy SEO BackLink Link Building Network <= 1.2.29 - Reflected Cross-Site Scripting via _wpnonce
Media
CVE-2023-51396
Brizy <= 2.4.29 - Cross-Site Scripting
Media
CVE-2023-5239
Security & Malware scan by CleanTalk <= 2.120 - IP Spoofing to Protection Mechanism Bypass
Media
CVE-2023-5209
WordPress Online Booking and Scheduling Plugin – Bookly <= 22.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2023-5325
Woocommerce Vietnam Checkout <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2023-5506
ImageMapper <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page/Post Deletion via imgmap_delete_area_ajax
Media
CVE-2023-5577
Bitly's WordPress Plugin <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-47666
Code Snippets <= 3.5.0 - Cross-Site Request Forgery via load
Media
CVE-2023-5525
Limit Login Attempts Reloaded <= 2.25.25 - Missing Authorization
Media
CVE-2023-5669
Featured Image Caption <= 0.8.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-5743
Telephone Number Linker <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-4642
kk Star Ratings <= 5.4.5 - Race Condition to Multiple User Voting
Baja
CVE-2017-20187
Magnesium-PHP Injection vulnerability
Baja
CVE-2023-6160
LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion
Baja
ghsa-gv2c-5g79-h73c
Ibexa ezplatform-kernel download route allows filename change
Baja
ghsa-g95c-xc83-8353
Ibexa DXP Download route allows filename change
Crítica
ghsa-7crc-r3wg-cfgf
Json response for search reveals Solr credentials
Crítica
ghsa-v6xp-ccvx-w52m
Json response for search reveals Solr credentials
Alta
CVE-2023-45827
Prototype Pollution(PP) vulnerability in setByPath
Alta
CVE-2023-39345
Unauthorized Access to Private Fields in User Registration API
Baja
ghsa-946c-f9w6-2c25
Download route allows filename change in eZpublish kernel
Alta
CVE-2023-46947
Subrion remote command execution vulnerability
Media
CVE-2023-4043
Eclipse Parsson Denial of Service vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.