Media
CVE-2024-30233
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtros
Media
CVE-2023-6799
WP Reset <= 2.0 - Sensitive Information Exposure due to Insufficient Randomness
Alta
CVE-2024-1990
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.1.0 - Authenticated (Contributor+) SQL Injection via Shortcode
Crítica
CVE-2024-30240
Calendarista <= 15.5.7 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2024-2261
Event Tickets and Registration <= 5.8.2 - Improper Authorization to Information Disclosure
Crítica
CVE-2024-30238
Photos and Files Contest Gallery <= 21.3.2 - Authenticated (Contributor+) SQL Injection
Crítica
CVE-2024-30242
Contact Form to Any API <= 1.1.8 - Authenticated (Subscriber+) SQL Injection
Crítica
CVE-2024-30237
Slider by Supsystic <= 1.8.10 - Authenticated (Admin+) SQL Injection
Alta
CVE-2024-30244
Church Admin <= 4.0.27 - Authenticated (Contributor+) SQL Injection
Media
CVE-2024-29794
Conversios.io <= 6.9.1 - Reflected Cross-Site Scripting
Media
CVE-2024-29770
Shortlinks by Pretty Links <= 3.6.2 - Reflected Cross-Site Scripting via post_status
Crítica
CVE-2024-0399
WooCommerce Customers Manager <= 29.6 - Authenticated (Subscriber+) SQL Injection
Media
CVE-2024-2871
Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode
Media
CVE-2024-2326
Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update
Media
CVE-2024-2112
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.22 - Sensitive Information Exposure
Alta
CVE-2024-1893
Easy Property Listings <= 3.5.2 - Authenticated(Contributor+) SQL Injection via Shortcode
Media
CVE-2024-2080
LiquidPoll – Polls, Surveys, NPS and Feedback Reviews <= 3.3.76 - Information Exposure
Crítica
CVE-2024-2804
Network Summary <= 2.0.11 - Unauthenticated SQL Injection
Alta
CVE-2024-2341
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2024-2344
Avada <= 7.11.6 - Authenticated (Admin+) SQL Injection via entry
Media
CVE-2024-2340
Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory Listing
Alta
CVE-2024-2342
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Contributor+) SQL Injection via Shortcode
Crítica
CVE-2024-1711
Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id'
Alta
CVE-2024-1799
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress <= 6.8.6 - Authenticated (Contributor+) SQL Injection via Shortcode
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.