Media
CVE-2023-48335
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Alta
CVE-2023-48327
WC Vendors Marketplace <= 2.4.7 - Authenticated (Shop manager+) SQL Injection via search dates
Media
CVE-2023-48323
Awesome Support <= 6.1.4 - Cross-Site Request Forgery via wpas_edit_reply_ajax()
Media
CVE-2023-48324
Awesome Support <= 6.1.4 - Missing Authorization via wpas_edit_reply_ajax()
Media
CVE-2023-48286
Accept Stripe Payments <= 2.0.79 - Insecure Direct Object Reference
Media
CVE-2023-48330
Bulk Comment Remove <= 2 - Cross-Site Request Forgery via brc_admin()
Media
CVE-2023-48329
Fast Custom Social Share by CodeBard <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-6136
Debug Log Manager <= 2.2.1 - Missing Authorization
Media
CVE-2023-48328
NextGEN Gallery <= 3.37 - Cross-Site Request Forgery
Media
CVE-2023-48332
Mail Bank - #1 Mail SMTP Plugin for WordPress <= 4.0.14 - Missing Authorization
Media
CVE-2023-48285
Accept Stripe Payments <= 2.0.79 - Unauthenticated Content Injection
Media
CVE-2023-41128
WP Roadmap <= 1.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-6137
Frontier Post <= 6.1 - Cross-Site Request Forgery
Media
CVE-2023-48317
Display Custom Post <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-48320
Video Player <= 1.5.22 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-38400
Enfold <= 5.6.4 - Reflected Cross-Site Scripting
Media
CVE-2023-48739
Porto Theme - Functionality <= 2.11.1 - Missing Authorization
Alta
CVE-2023-48319
Salon booking system < 8.7 - Authenticated (Editor+) Privilege Escalation
Alta
CVE-2023-48742
License Manager for WooCommerce <= 2.2.10 - Authenticated (Administrator+) SQL Injection
Media
CVE-2023-48331
MyBookTable Bookstore <= 3.3.3 - Cross-Site Request Forgery
Alta
CVE-2023-5504
BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal
Media
dbf54852-f3fe-4c9e-9348-44a73f9a8131
WooCommerce Parcel Pro <= 1.6.11 - Cross-Site Request Forgery
Media
CVE-2023-48277
Super Progressive Web Apps <= 2.2.21 - Missing Authorization
Media
c146f89c-5df3-4aaf-b880-0ce6016dfb6d
GS Team Members <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.