Media
CVE-2024-8771
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.822
Restablecer filtros
Alta
CVE-2024-47309
Cities Shipping Zones for WooCommerce <= 1.2.7 - Authenticated (Shop Manager+) Local File Inclusion
Media
CVE-2024-47328
Automation By Autonami <= 3.1.2 - Authenticated (Administrator+) SQL Injection
Media
CVE-2024-8872
Store Hours for WooCommerce <= 4.3.20 - Reflected Cross-Site Scripting
Alta
CVE-2024-8290
WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.12 - Insecure Direct Object Reference to Account Takeover/Privilege Escalation
Media
CVE-2024-6590
Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Media
CVE-2024-7491
HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.1 - Insecure Direct Object Reference to Unsubscribe
Media
CVE-2024-8668
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Media
CVE-2024-8678
Revolut Gateway for WooCommerce <= 4.17.3 - Missing Authorization to Unauthenticated Order Status Update
Alta
CVE-2024-44030
Checkout Mestres WP <= 8.6 - Authenticated (Admin+) Local File Inclusion
Media
CVE-2024-8658
myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification <= 2.7.3 - Missing Authorization to Unauthenticated Database Upgrade
Media
CVE-2024-44046
Themify – WooCommerce Product Filter <= 1.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2024-8716
XT Ajax Add To Cart for WooCommerce <= 1.1.2 - Reflected Cross-Site Scripting
Alta
CVE-2024-9156
TI WooCommerce Wishlist <= 2.9.0 - Unauthenticated SQL Injection via 'lang'
Media
CVE-2024-44006
WooCommerce Multilingual & Multicurrency <= 5.3.6 - Missing Authorization
Alta
CVE-2024-44048
Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.10 - Authenticated (Contributor+) Local File Inclusion
Media
CVE-2024-44009
WCFM Marketplace – Multivendor Marketplace for WooCommerce <= 3.6.11 - Reflected Cross-Site Scripting
Media
CVE-2024-8724
Waitlist Woocommerce ( Back in stock notifier ) <= 2.7.5 - Reflected Cross-Site Scripting
Alta
CVE-2024-8271
FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution
Media
CVE-2022-3459
WooCommerce Multiple Free Gift <= 1.2.3 - Insufficient Server-Side Validation to Arbitrary Gift Adding
Media
CVE-2024-8742
Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget
Media
CVE-2024-5567
Betheme | Responsive Multipurpose WordPress & WooCommerce Theme <= 27.5.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File
Media
CVE-2024-45459
Product Slider for WooCommerce <= 1.13.50 - Reflected Cross-Site Scripting
Crítica
CVE-2024-8277
WooCommerce Photo Reviews Premium <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.