Media
CVE-2023-5863
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Crítica
CVE-2023-46502
OpenCRX allows a remote attacker to execute arbitrary code via a crafted request
Media
CVE-2023-4247
GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin deactivation
Media
CVE-2023-4246
GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installation
Alta
CVE-2023-47179
WooODT Lite <= 2.4.6 - Missing Authorization to Arbitrary Options Update
Media
88163d55-ab97-4697-a25b-d54615e2a843
Solid Security Basic <= 9.0.0 - Unauthenticated Login Page Disclosure
Alta
CVE-2023-47180
Finale Lite <= 2.16.0 - Missing Authorization to Content Deletion
Crítica
CVE-2023-47178
The Plus Addons for Elementor Pro <= 5.2.8 - Unauthenticated Local File Inclusion
Media
CVE-2023-47177
Linker <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-4823
WP Meta and Date Remover < 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via settings
Media
CVE-2023-47184
Admin Bar & Dashboard Control <= 1.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-47181
IdeaPush <= 8.52 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-4248
GiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration Deletion
Media
CVE-2023-47182
Login Screen Manager <= 3.5.2 - Cross-Site Request Forgery
Media
CVE-2023-4686
WP Customer Reviews <= 3.6.6 - Authenticated (Subscriber+) Sensitive Information Exposure
Media
CVE-2023-2707
gAppointments <= 1.9.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2023-47185
wpDiscuz <= 7.6.11 - Unauthenticated Stored Cross-Site Scripting via Comment Uploaded Image Filename
Alta
CVE-2023-46352
Exposure of Private Personal Information to an Unauthorized Actor in Smart Modules - Pixel Plus: Events + CAPI + Pixel Catalog for Facebook module for PrestaShop
Alta
CVE-2023-44025
Improper neutralization of SQL parameter in Addify - Free Gifts module for PrestaShop
Alta
CVE-2023-46245
Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File
Alta
CVE-2023-46240
CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment
Media
CVE-2023-5842
Cross-site Scripting (XSS) in dolibarr/dolibarr
Alta
CVE-2023-5099
HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Alta
CVE-2023-5433
Message ticker <= 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.