Crítica
CVE-2019-25217
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2019-15328
Import and export users and customers <= 1.14.0.2 - Cross-Site Scripting
Crítica
ce834ae1-e05a-4b0e-9d7f-144669437d70
Caldera Forms Pro < 1.8.2 - Missing Authorization
Crítica
CVE-2019-9618
GraceMedia Media Player <= 1.0 - Local File Inclusion
Crítica
CVE-2018-12426
WP Live Chat Support Pro <= 8.0.06 - Remote Code Execution via unrestricted file upload
Alta
CVE-2019-25152
Abandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site Scripting
Media
CVE-2019-18834
WooCommerce Subscriptions < 2.6.3 - Stored Cross-Site Scripting
Alta
7b4f63af-cb43-4287-8fdd-0ff1df70c6d6
Rencontre – Dating Site <= 3.2.1 - Authenticated (Admin+) SQL Injection
Media
CVE-2019-9575
Quiz And Survey Master <= 6.2.1 - Cross-Site Scripting
Alta
1c307340-2911-46b9-9c90-0a7ebad8a0e9
Smash Balloon Social Photo Feed <= 1.11.3 - Cross-Site Request Forgery to Back-Up Deletion
Media
CVE-2019-15109
The Events Calendar <= 4.8.1 - Cross-Site Scripting via tribe_paged Parameter
Alta
CVE-2019-5924
Smart Forms < 2.6.26 - Cross-Site Request Forgery
Alta
CVE-2019-15114
FormCraft <= 1.2.1 - Cross-Site Request Forgery
Alta
CVE-2019-5920
FormCraft <= 1.2.1 - Cross-Site Request Forgery
Crítica
4d38167c-47f8-473c-94de-91d9b439ddde
Indeed Membership Pro <= 7.5 - Arbitrary File Upload
Alta
01f0f734-b22e-4cd6-be99-ce6c2cd6f2c9
Indeed Membership Pro <= 7.5 - Remote Image File Inclusion
Alta
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Alta
CVE-2019-9573
WP Human Resource Management Plugin < 2.2.6 - Authorization Bypass
Alta
CVE-2019-15115
LoginWP <= 2.9.1 - Multiple Cross-Site Request Forgery vulnerabilities
Media
CVE-2019-9168
WooCommerce <= 3.5.4 - Stored Cross-Site Scripting
Media
CVE-2019-8943
WordPress Core <= 5.0.3 - Path Traversal and Local File Inclusion
Alta
CVE-2019-8942
WordPress Core < 5.0.1 - Remote Code Execution
Media
CVE-2019-7412
PS PHPCaptcha <= 1.1.0 - Authenticated Denial of Service
Media
CVE-2019-7411
Launcher: Coming Soon & Maintenance Mode < 1.0.11 - Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.