Alta
CVE-2023-25767
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Crítica
CVE-2023-25765
Sandbox escape in Jenkins Email Extension Plugin
Alta
CVE-2023-25578
Denial of service vulnerability when parsing multipart request body
Alta
CVE-2022-42735
Privilege escalation in Apache ShenYu
Alta
CVE-2023-24580
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart f
Alta
CVE-2023-23706
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.5.14 - Cross-Site Request Forgery
Media
CVE-2023-25461
Wp-Insert <= 2.5.0 Authenticated (Admin+) Stored Cross Site Scripting
Media
CVE-2023-25703
Meta Slider and Carousel with Lightbox <= 1.6.2 - Cross-Site Request Forgery
Media
CVE-2023-25781
Upload File Type Settings Plugin <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-23832
Ultimate WP Query Search Filter <= 1.0.10 - Authenticated (Contributor+) Stored Cross Site Scripting
Media
CVE-2023-25794
Nooz <= 1.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2023-25782
Service Area Postcode Checker <= 2.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2022-40198
TeraWallet – For WooCommerce <= 1.3.24 - Cross-Site Request Forgery via admin_options
Media
CVE-2023-23710
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.5.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-25792
WP Open Social <= 5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-23889
Quick Paypal Payments <= 5.7.25 - Authenticated (Contributor+) Cross Site Scripting
Media
CVE-2023-25481
Podlove Subscribe button <= 1.3.7 - Cross-Site Request Forgery via save function
Media
CVE-2023-25787
WP资源下载管理 <= 1.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-25789
Tapfiliate <= 3.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-25485
JSON Content Importer <= 1.3.15 - Authenticated (Admin+) Cross Site Scripting
Media
CVE-2023-1093
OAuth Single Sign On – SSO (OAuth Client) <= 6.24.1- Cross-Site Request Forgery via 'discard' in mooauth_client_applist_page
Media
CVE-2023-25783
Peadig's Like & Share Button <= 1.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-24005
Inline Tweet Sharer <= 2.5.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2023-25785
WP Post Rating <= 2.4.6 - Missing Authorization to Vote Manipulation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.