Media
CVE-2023-28790
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2023-4040
Stripe Payment Plugin for WooCommerce <= 3.7.9 - Missing Authorization to Arbitrary Order Status Modification
Media
CVE-2023-40557
Tabs & Accordion <= 1.3.10 - Authenticated (Contributor+) Content Injection
Crítica
CVE-2023-40609
Contact form 7 Custom validation <= 1.1.3 - Unauthenticated SQL Injection via 'post'
Media
CVE-2023-40605
Typing Effect <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Media
CVE-2023-27617
RSVPMarker <= 10.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Alta
CVE-2023-40601
Mortgage Calculator Estatik <= 2.0.11 - Reflected Cross-Site Scripting
Media
CVE-2023-40603
Simple Org Chart <= 2.3.4 - Missing Authorization
Media
CVE-2023-4376
Serial Codes Generator and Validator with WooCommerce Support <= 2.4.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Alta
CVE-2023-27616
RSVPMaker <= 10.6.5 - Unauthenticated Stored Cross-Site Scripting via 'email'
Media
96112707-04ca-4647-9008-31954764486f
Gallery Portfolio <= 1.4.6 - Missing Authorization via Multiple AJAX actions
Media
CVE-2023-40011
Cost Calculator Builder <= 3.1.42 - Improper Authorization
Media
CVE-2023-28791
Simple Org Chart <= 2.3.4 - Cross-Site Request Forgery
Media
CVE-2023-4772
Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-40330
GD Security Headers <= 1.6.1 - Reflected Cross-Site Scripting
Media
CVE-2023-40602
Doofinder for WooCommerce <= 1.5.49 - Unauthenticated Open Redirect
Alta
CVE-2023-40335
Cleverwise Daily Quotes <= 3.2 - Reflected Cross-Site Scripting
Alta
CVE-2023-3169
tagDiv Composer <= 4.1 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2023-7296
BigBlueButton <= 3.0.0-beta.4 - Authenticated (Author+) Stored Cross-Site Scripting
Crítica
CVE-2023-4404
Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation
Media
CVE-2023-40608
Paid Memberships Pro CCBill Gateway <= 0.3 - Insufficient Authorization
Media
CVE-2023-40607
CLUEVO LMS, E-Learning Platform <= 1.10.0 - Cross-Site Request Forgery
Alta
CVE-2023-40606
Kanban Boards <= 2.5.21 - Authenticated (Administrator+) Remote Code Execution
Media
CVE-2023-3170
tagDiv Composer <= 4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.