Alta
CVE-2023-5538
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2023-46088
WP Full Stripe Free <= 7.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2023-46153
User Feedback <= 1.0.9 - Unauthenticated Cross-Site Scripting
Media
CVE-2023-46090
Spider Facebook <= 1.0.15 - Reflected Cross-Site Scripting
Media
CVE-2023-46146
Themify Ultra <= 7.3.5 - Missing Authorization
Media
CVE-2023-5615
Skype Legacy Buttons <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-44999
Stripe Gateway <= 7.6.0 - Cross-Site Request Forgery
Media
CVE-2023-46152
WOLF <= 1.0.7.1 - Cross-Site Request Forgery
Media
CVE-2023-46150
WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Cross-Site Request Forgery
Media
CVE-2023-46094
Conversios.io <= 6.5.3 - Reflected Cross-Site Scripting
Media
CVE-2023-46091
Category SEO Meta Tags <= 2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-46148
Themify Ultra <= 7.3.5 - Missing Authorization
Media
CVE-2023-5621
Thumbnail Slider With Lightbox <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Image Title
Media
CVE-2023-46095
Smooth Scroll Links <= 1.1.0 - Cross-Site Request Forgery
Media
CVE-2023-46092
Webmaster Tools <= 2.0 - Cross-Site Request Forgery vin lionscripts_plg_f
Media
CVE-2023-46089
Userback <= 1.0.13 - Cross-Site Request Forgery
Alta
CVE-2023-46147
Themify Ultra <= 7.3.5 - Authenticated (Subscriber+) PHP Object Injection
Media
CVE-2023-46151
Product Category Tree <= 2.5 - Cross-Site Request Forgery
Crítica
CVE-2023-45384
Unrestricted Upload of File with Dangerous Type in KnowBand - One Page Checkout, Social Login & Mailchimp module for PrestaShop
Alta
CVE-2023-45383
Improper Limitation of a Pathname to a Restricted Directory in Common-Services - Sonice Etiquetage module for PrestaShop
Crítica
CVE-2023-45379
Improper neutralization of SQL parameter in Posthemes Rotator Img module for PrestaShop
Crítica
CVE-2023-43661
Cachet vulnerable to Authenticated Remote Code Execution
Baja
CVE-2023-45143
Undici's cookie header not cleared on cross-origin redirect in fetch
Crítica
CVE-2023-45133
Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.