Alta
CVE-2021-24465
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Media
f4e8ad18-fa25-414c-8a94-9ad9bd3c2e31
XO Event Calendar <= 2.3.6 - Reflected Cross-Site Scripting
Media
CVE-2021-39322
Easy Social Icons <= 3.0.8 – Reflected Cross-Site Scripting
Media
CVE-2021-38314
Gutenberg Template Library & Redux Framework <= 4.2.11 - Missing Authorization to Sensitive Information Disclosure
Alta
CVE-2021-38312
Gutenberg Template Library & Redux Framework <= 4.2.1 - Incorrect Authorization Leading to Arbitrary Plugin Installation and Post Deletion
Media
1f38aca5-0d69-421e-a3f2-d12cd593a88a
Easy Social Icons <= 3.0.9 - Reflected Cross-Site Scripting
Media
CVE-2021-4372
WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Stored Cross-Site Scripting
Media
afd67c36-31ec-4e44-bad5-a018834ccfbc
qTranslate X <= 3.4.6.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
8a95633f-b5e1-4a92-b566-90fb05a289ce
Software License Manager <= 4.4.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2021-4353
WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Unauthenticated Settings Import/Export
Media
23132298-f1de-4085-a76f-f007b8b7de15
WordPress Geolocation Plugin – CF Geo Plugin <= 7.13.11 - Reflected Cross-Site Scripting
Media
CVE-2021-39320
underConstruction <= 1.18 - Reflected Cross-Site Scripting
Media
CVE-2021-24569
Cookie Notice & Compliance for GDPR / CCPA <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
CVE-2021-39316
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.45 - Directory Traversal
Media
CVE-2021-4445
Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update
Media
ba88a1f5-9ebf-4899-81b3-e65587ae2fe2
WP Statistics <= 13.0.9 - Reflected Cross-Site Scripting
Media
834ff44a-4259-49a5-bad3-26fce393fb98
Docket Cache – Object Cache Accelerator <= 21.08.01 - Reflected Cross-Site Scripting
Media
CVE-2021-24670
CoolClock <= 4.3.4 - Authenticated Stored Cross-Site Scripting
Media
57be47e2-9aac-42bd-af6a-5060d2f86449
User Activity Log <= 1.4.6 - Reflected Cross Site Scripting
Media
44cbaa25-7e91-4b2e-81c4-ba1d7ba02350
Multiple miniOrange Plugins (Various Version) - Reflected Cross-Site Scripting
Media
CVE-2021-24610
TranslatePress <= 2.0.8 - Authenticated Stored Cross-Site Scripting
Media
CVE-2021-24633
Countdown Block <= 1.1.1 - Missing Authorization
Media
001e066f-6add-4426-8cd7-32229a9188d1
User Activity Log <= 1.4.6 - Reflected Cross-Site Scripting
Media
CVE-2021-24681
Duplicate Page <= 4.4.1 Authenticated (Admin+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.