Crítica
CVE-2020-26511
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Media
CVE-2020-36721
Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation
Crítica
CVE-2020-36708
Epsilon Framework Themes (Various Versions) - Function Injection
Media
37f47ce1-0657-414d-a491-99f2722a44f5
BA Book Everything Plugin < 1.3.25 - Cross-Site Scripting and Cross-Frame Scripting
Alta
CVE-2021-24132
Slider by 10Web <= 1.2.35 - SQL Injection
Alta
CVE-2020-26876
WP Courses <= 2.0.28 - Improper Access Controls
Media
CVE-2020-36760
Ocean Extra <=1.6.5 - Cross-Site Request Forgery Bypass
Media
CVE-2020-36755
Customizr <= 4.3.0 - Cross-Site Request Forgery Bypass
Media
CVE-2020-36753
Hueman <= 3.6.3 - Cross-Site Request Forgery Bypass
Media
CVE-2020-36736
WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 1.5.15 - Cross-Site Request Forgery Bypass
Media
CVE-2020-36735
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.6.3 - Cross-Site Request Forgery Bypass
Crítica
CVE-2020-36706
Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload
Alta
CVE-2020-36174
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27 - Cross-Site Request Forgery to Plugin Installation
Crítica
CVE-2015-9324
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.3.2 - SQL Injection
Media
CVE-2015-9360
UpdraftPlus <= 1.9.63 and UpdraftPlus (paid) <= 2.9.63 - Cross-Site Scripting
Media
CVE-2020-36175
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27 - Validation Bypass via Email Field
Crítica
CVE-2019-13571
Advanced Contact Form 7 DB <= 1.6.2 - SQL Injection
Alta
08e9e7f4-0f25-4bc1-85b7-4b504ed38582
Coditor <= 1.1 - Remote Code Execution
Media
CVE-2020-36510
15Zine | Magazine Newspaper Blog News WordPress Theme < 3.3.0 - Reflected Cross-Site Scripting
Media
CVE-2020-36173
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27.1 - Stored Cross-Site Scripting
Alta
CVE-2020-35939
Team Showcase <= 1.22.15 - Object Injection
Media
ac3a7732-c076-4418-b44a-748cc5668107
Discount Rules for WooCommerce <= 2.2.0 - Missing Authorization
Alta
CVE-2020-35936
Team Showcase <= 1.22.15 - Stored Cross-Site Scripting
Alta
CVE-2020-35937
Team Showcase <= 1.22.15 - Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.