Media
CVE-2023-30473
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Crítica
CVE-2022-4118
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.2 - Unauthenticated SQL Injection
Media
CVE-2023-0268
Mega Addons For WPBakery Page Builder <= 4.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Alta
CVE-2023-2114
NEX-Forms <= 8.3.3 - Authenticated (Administrator+) SQL Injection
Media
CVE-2023-0603
Sloth Logo Customizer <= 2.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Alta
CVE-2023-1408
Video List Manager <= 1.7 - Authenticated (Admin+) SQL Injection
Media
CVE-2023-30747
WooCommerce Easy Duplicate Product <= 0.3.0.0 - Reflected Cross-Site Scripting via wedp_duplicated
Media
CVE-2023-0536
Wp-D3 <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-0537
Product Slider For WooCommerce Lite <= 1.1.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Meta Keys
Media
CVE-2023-0544
WP Login Box <= 2.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2023-1596
tagDiv Composer < 4.0 - Reflected Cross-Site Scripting via ‘td_video_url’
Media
CVE-2023-0522
Enable/Disable Auto Login when Register <= 1.1.0 Cross-Site Request Forgery
Media
CVE-2023-30778
PowerPress <= 10.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-30487
LearnPress - Export/Import Courses <= 4.0.2 - Reflected Cross-Site Scripting
Media
CVE-2023-0514
Membership Database <= 1.0 - Reflected Cross-Site Scripting
Media
CVE-2023-29197
guzzlehttp/psr7 < 1.9.1 & 2.4.5 - Interpretation Conflict
Crítica
CVE-2023-28787
Quiz and Survey Master <= 8.1.4 - Unauthenticated SQL Injection
Media
2b2302d9-426c-415b-a7d3-3a9de95d87d1
WPML <= 4.6.0 - Reflected Cross-Site Scripting via wp_lang
Alta
CVE-2021-34337
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrar
Media
CVE-2023-2102
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
Media
CVE-2023-2105
alextselegidis/easyappointments Session Fixation vulnerability
Media
CVE-2023-2104
alextselegidis/easyappointments Improper Access Control vulnerability
Media
CVE-2023-2103
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
Alta
CVE-2023-30535
Snowflake JDBC vulnerable to command injection via SSO URL authentication
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.