Media
391d65a7-1675-4eae-b129-a1208cd95669
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.616
Alta
CVE-2022-34347
Download Manager <= 3.2.48 - Cross-Site Request Forgery to Plugin Settings Update
Crítica
CVE-2022-36296
ActiveDEMAND <= 0.2.27 - Missing Authorization Checks
Crítica
CVE-2022-34149
WP OAuth Server <= 3.0.4 - Authentication Bypass
Baja
CVE-2022-31177
Flask-AppBuilder before v4.1.3 allows inference of sensitive information through query strings
Media
CVE-2022-2589
Fava vulnerable to reflected cross-site scripting
Media
CVE-2022-2362
Download Manager <= 3.2.49 - IP Blocking Bypass
Media
eb828160-b537-4435-9d85-47e0d70a6704
Remove tabs and fields from WooCommerce <= 1.68 - Reflected Cross-Site Scripting
Alta
e2e2f446-5391-4189-8c9c-3be2459808d0
Social Slider Feed <= 2.0.4 - Missing Authorization
Media
e012d7a0-46f9-4f3b-a178-2d06655fd441
External url as post Featured Image <= 2.02 - Reflected Cross-Site Scripting
Media
CVE-2022-2198
WPQA - Builder forms Addon For WordPress < 5.7 - Information Disclosure
Alta
CVE-2022-2276
WP Edit Menu < 1.5.0 - Missing Authorization to Post Deletion
Alta
dc2532b4-907f-438b-baab-c3966cf30f74
Student Result or Employee Database <= 1.7.9 - Missing Authorization
Media
d36d97fb-2fce-4248-8955-7d66919487e3
Automatic pages for Privacy Policy, Terms, About, Contact us <= 1.41 - Reflected Cross-Site Scripting
Media
d1f86c9d-38dc-4d5d-af37-9443348fe1e8
Redirect By Cookie <= 1.06 - Reflected Cross-Site Scripting
Alta
CVE-2022-2407
WP phpMyAdmin <= 5.2.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
cce4a7cc-d93c-4d0e-ba63-b73bee0ea181
Find Slow Functions & Actions & Filters & Hooks <= 1.40 - Reflected Cross-Site Scripting
Media
CVE-2022-25649
Affiliate For WooCommerce <= 4.7.0 - Missing Authorization
Media
bfb329da-00df-4178-ad40-9b0b718dc30e
Add Custom Post Type into Post Query <= 1.03 - Reflected Cross-Site Scripting
Alta
CVE-2022-2593
Better Search Replace <= 1.4 - Authenticated (Administrator+) SQL Injection
Alta
CVE-2022-34154
Enable SVG, WebP & ICO Upload <= 1.1.0 - Arbitrary File Upload
Alta
CVE-2022-36284
Affiliate For WooCommerce premium <= 4.7.0 - Authenticated Insecure Direct Object Reference
Media
a646ebe5-3445-4e9b-99a9-23761d4fba9c
Comment Fields <= 1.03 - Reflected Cross-Site Scripting
Media
CVE-2022-2375
WP Sticky Button <= 1.4 - Missing Authorization to Arbitrary Settings Update
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.