Alta
CVE-2022-2540
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.631
Alta
c80e6f0b-ccca-4755-b64e-cfcebc5cc1fe
WP Sticky Button <= 1.3 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2022-36375
Tabs – Responsive Tabs with WooCommerce Product Tab Extension <= 3.6.0 - Authenticated (Admin+) Arbitrary Options Update
Media
CVE-2022-1322
Coming Soon – Under Construction <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
6be64d8d-fc71-40c2-baa8-985445d953ea
SmartIdeo <= 2.7.0 - Stored Cross-Site Scripting
Media
CVE-2022-0446
Simple Banner <= 2.11.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2022-2542
uContext for Clickbank <= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting
Media
41d73ce6-a256-43ef-8627-c6f6d6635e3e
JobBoardWP – Job Board Listings and Submissions <= 1.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2022-1563
WPGraphQL WooCommerce <= 0.12.3 - Information Disclosure
Media
35cc980b-9c52-4f0b-aeb2-4afa6efacd8f
WP ERP <=1.10.5 - Sensitive Data Exposure
Alta
32b3ad84-6adb-44c1-942a-51f27638c8c9
Multiple Roles < 1.3.7 - Privilege Escalation
Media
CVE-2022-2532
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
17cb7420-b4e1-4959-beae-d3c0a8c4b1ff
VR Calendar <= 2.3.1 - Reflected Cross-Site Scripting
Alta
175d8dc0-fc12-464b-b651-50a060851eb2
Trust Payments Gateway (3DS2) <= 1.2.0 - Cross-Site Request Forgery
Alta
CVE-2022-2541
uContext for Amazon <= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting
Alta
CVE-2022-34749
Mistune vulnerable to catastrophic backtracking
Media
CVE-2022-2514
The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due to the lack of escaping of error messages which contained the parameters in verbatim.
Media
CVE-2022-2523
Fava vulnerable to Reflected Cross-site Scripting
Alta
CVE-2022-24294
Apache MXNet vulnerable to potential denial-of-service by excessive resource consumption
Media
CVE-2022-2535
SearchWP Live Ajax Search <= 1.6.1 - Sensitive Information Disclosure
Alta
CVE-2022-33970
Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension <= 3.1.2 - Authenticated Arbitrary Options Update
Alta
CVE-2022-33969
Flipbox – Awesomes Flip Boxes Image Overlay <= 2.6.0 - Authenticated (Admin+) Arbitrary Options Update
Alta
CVE-2022-2354
WP-DBManager <= 2.80.7 - Authenticated (Admin+) Remote Code Execution on Multi-Site
Crítica
CVE-2022-31181
Chain: SQL Injection (CWE-89) and Eval Injection (CWE-95)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.