Media
CVE-2023-38386
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2023-38390
Mobile Address Bar Changer <= 3.0 - Cross-Site Request Forgery to Settings Update
Media
CVE-2023-39166
tagDiv Composer < 4.4 - Cross-Site Request Forgery to Cross-Site Scripting
Media
CVE-2023-37979
Ninja Forms <= 3.6.25 - Reflected Cross-Site Scripting via 'data'
Media
CVE-2023-31214
WP Quick Post Duplicator <= 2.0 - Missing Authorization
Sin evaluar
802
Admiror Gallery - XSS (Cross Site Scripting)
Sin evaluar
801
bagallery - Other
Alta
CVE-2023-26859
Multiple improper neutralizations of an SQL parameters in Sendinblue module for PrestaShop
Crítica
CVE-2023-34478
Path Traversal in Apache Shiro
Media
f962a3ef-205d-42e2-acf1-45eabfdba3ee
Local Development <=2.8.2 - Cross-Site Request Forgery to Settings Update
Media
CVE-2023-38396
Google Map Shortcode <= 3.1.2 - Cross-Site Request Forgery to Plugin Setting Update
Media
CVE-2023-38483
Instant CSS <= 1.1.4 - Missing Authorization via AJAX Actions
Alta
CVE-2023-3435
User Activity Log <= 1.6.4 - Unauthenticated SQL Injection
Media
CVE-2023-38479
Simple Googlebot Visit <= 1.2.4 - Missing Authorization to Settings Update
Media
CVE-2023-38398
Taboola <= 2.0.1 - Cross-Site Request Forgery to Plugin Settings Update
Crítica
CVE-2023-32297
LWS Affiliation <= 2.2.6 - Unauthenticated Remote/Local File Inclusion
Media
CVE-2023-3645
Contact Form Builder by Bit Form <= 2.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2023-38477
QR code MeCard/vCard generator <= 1.6.0 - Missing Authorization via wqm_make_url_permanent
Media
CVE-2023-3721
WP-EMail <= 2.69.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2023-38392
Custom Field Template <= 2.5.9 - Reflected Cross-Site Scripting
Media
CVE-2023-2802
Ultimate Addons for Contact Form 7 <= 3.1.28 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2023-3636
WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
Media
CVE-2023-37990
Perelink Pro <= 2.1.4 - Cross-Site Request Forgery to Settings Update
Media
CVE-2023-38480
Booster Elementor Addons <= 1.4.9 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.