Crítica
CVE-2024-43931
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.681
Restablecer filtros
Alta
CVE-2024-7351
Simple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object Injection
Alta
CVE-2024-7656
Image Hotspot by DevVN <= 1.2.5 - Authenticated (Author+) PHP Object Injection
Alta
CVE-2024-7384
AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function
Crítica
CVE-2024-5335
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 1.6.4 - Unauthenticated PHP Object Injection
Media
CVE-2024-7955
Starbox – the Author Box for Humans <= 3.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-43290
Atarim <= 4.0.1 - Missing Authorization via remove_feedbacktool_notice()
Alta
CVE-2024-43354
myCred <= 2.7.2 - Unauthenticated PHP Object Injection
Alta
CVE-2024-43252
Crew HRM <= 1.1.1 - Unauthenticated PHP Object Injection
Media
CVE-2024-43263
Visual Composer Starter <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2024-43242
Indeed Membership Pro <= 12.7 - Unauthenticated PHP Object Injection
Media
CVE-2024-7621
Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Media
CVE-2024-43233
BSK Forms Blacklist <= 3.8 - Reflected Cross-Site Scripting
Alta
CVE-2024-37099
GiveWP <= 3.14.1 - Unauthenticated PHP Object Injection
Media
CVE-2024-6562
affiliate-toolkit <= 3.5.5 - Unauthenticated Full Path Dislcosure
Alta
CVE-2024-7486
MultiPurpose <= 1.2.0 - Authenticated (Contributor+) PHP Object Injection
Alta
CVE-2024-7560
News Flash <= 1.1.0 - Authenticated (Editor+) PHP Object Injection
Alta
CVE-2024-7561
The Next <= 1.1.0 - Authenticated (Contributor+) PHP Object Injection
Media
CVE-2024-43116
Simple Local Avatars <= 2.7.10 - Cross-Site Request Forgery via save_default_avatar_file_id()
Alta
CVE-2024-43141
Participants Database <= 2.5.9.2 - Unauthenticated PHP Object Injection
Media
CVE-2024-6872
Build Your Dream Website Fast with 400+ Starter Templates and Landing Pages, No Coding Needed, One-Click Import for Elementor & Gutenberg Blocks! – TemplateSpare <= 2.4.2 - Missing Authorization to Authenticated (Subscriber+) Theme Update
Alta
CVE-2024-39636
Better Find and Replace <= 1.6.1 - Unauthenticated PHP Object Injection
Media
CVE-2024-6897
aThemes Starter Sites <= 1.0.53 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Alta
CVE-2024-6152
Flipbox Builder <= 1.5 - Authenticated (Contributor+) PHP Object Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.