Alta
CVE-2021-24350
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Alta
CVE-2021-24354
Simple 301 Redirects 2.0.0 - 2.0.3 - Authenticated Arbitrary Plugin Installation
Alta
CVE-2021-24352
Simple 301 Redirects 2.0.0 - 2.0.3 - Unauthenticated Redirect Export
Crítica
30ea46c1-bb29-49b8-b161-e61f13167ff4
Gallery From Files <= 1.60 - Arbitrary File Upload
Media
CVE-2021-24355
Simple 301 Redirects 2.0.0 - 2.0.3 - Authenticated Wildcard Activation and Retrieval
Media
24f13f9a-b240-4e32-9f12-117dbe7ecac4
Multivendor Marketplace Solution for WooCommerce <= 3.7.3 - Insecure Direct Object Reference
Media
CVE-2021-24424
WP Reset <= 1.86 - Authenticated Stored Cross-Site Scripting via extra_data Parameter
Alta
CVE-2021-24347
SP Project & Document Manager <= 4.21 - Authenticated Shell Upload
Media
CVE-2021-47957
Cookie Law Bar <= 1.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2021-24504
WP LMS – Best WordPress LMS Plugin <= 1.1.5 - Cross-Site Scripting
Media
CVE-2021-24343
iFlyChat – WordPress Chat <= 4.6.4 - Admin+ Stored Cross-Site Scripting
Media
CVE-2021-24342
JNews - WordPress Newspaper Magazine Blog AMP Theme < 8.0.6 - Reflected Cross-Site Scripting
Media
CVE-2021-24344
Easy Preloader <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2021-24421
WP JobSearch <= 1.7.3 - Stored Cross-Site Scripting
Alta
CVE-2021-24340
WP Statistics <= 13.0.7 - Unauthenticated SQL Injection
Alta
CVE-2021-24337
Video Embed <= 1.0 - Authenticated (Subscriber+) SQL Injection
Alta
CVE-2021-24336
FlightLog <= 3.0.2 - Authenticated (Editor+) SQL Injection
Media
CVE-2021-24313
WP Prayer <= 1.6.1 - Authenticated Stored Cross-Site Scripting
Media
CVE-2021-24482
Related Posts for WordPress <= 2.0.4 - Stored Cross-Site Scripting
Media
CVE-2021-24335
Car Repair Services & Auto Mechanic < 4.0 - Reflected Cross-Site Scripting
Alta
CVE-2021-24562
LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress < 4.21.2 - Insecure Direct Object Reference
Crítica
4280654a-9eab-4541-8b82-74086d37d928
CM Registration Pro <= 3.2.0 - PHP Object Injection
Media
CVE-2021-24334
Instant Images – One Click Unsplash, Pixabay and Pexels Uploads <= 4.4.0 - Authenticated Stored Cross-Site Scripting
Media
CVE-2021-24330
Funnel Builder by CartFlows <= 1.6.12 - Authenticated Stored Cross-Site scripting via FB Pixel ID and Google Analytics ID
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.