Media
CVE-2024-4569
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Media
CVE-2024-37249
Advanced Custom Fields PRO < 6.3.2 - Missing Authorization
Alta
CVE-2024-6054
Auto Featured Image <= 1.2 - Authenticated (Contributor+) Arbitrary File Upload
Media
CVE-2024-37251
Advanced Custom Fields Pro <= 6.3.1 - Cross-Site Request Forgery
Baja
CVE-2024-37253
WP Directory Kit <= 1.3.6 - Authenticated (Admin+) HTML Injection
Media
CVE-2024-37250
Advanced Custom Fields Pro <= 6.3.1 - Missing Authorization
Media
CVE-2024-5215
HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Media
CVE-2024-5173
HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings
Alta
CVE-2024-4869
WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header
Media
CVE-2024-5332
Exclusive Addons for Elementor <= 2.6.9.8 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Card Widget
Media
CVE-2024-37245
All In One Redirection <= 2.2.0 - Reflected Cross-Site Scripting
Media
CVE-2024-37248
Anima <= <=1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-37246
Gallery Slideshow <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
379a5016-3968-4b28-8d6e-0f517e419016
Various Plugins <= Various Version - Use of Polyfill.io
Media
CVE-2024-5451
The7 — Website and eCommerce Builder for WordPress <= 11.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
Crítica
CVE-2024-6028
Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter
Alta
CVE-2024-5431
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode
Media
CVE-2024-6075
WP eStore <= 8.5.4 - Cross-Site Request Forgery to Coupon Deletion
Media
CVE-2024-6073
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Discount Editing
Media
CVE-2024-6307
WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API
Alta
CVE-2024-5630
Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Authenticated (Author+) Arbitrary File Upload
Media
CVE-2024-6072
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via REQUEST_URI
Media
CVE-2024-6074
WP eStore <= 8.5.4 - Reflected Cross-Site Scripting via Customer Editing
Media
CVE-2024-3249
Zita Elementor Site Library <= 1.6.2 - Missing Authorization to Page Creation and Options Modification
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.