Media
CVE-2023-5884
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.681
Restablecer filtros
Alta
501e9cd1-1187-4d01-a3cc-5edba64c391f
Image Compressor & Optimizer - iLoveIMG <= 1.0.5 - Authenticated (Administrator+) PHP Object Injection
Media
CVE-2023-4603
Star CloudPRNT for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting
Crítica
CVE-2023-5952
Welcart e-Commerce <= 2.9.4 - Unauthenticated PHP Object Injection
Media
CVE-2023-47529
Cloud Templates & Patterns collection <= 1.2.2 - Sensitive Information Exposure via Log File
Media
CVE-2023-47514
Star CloudPRNT for WooCommerce <= 2.0.3 - Unauthenticated Cross-Site Scripting
Crítica
CVE-2023-47507
Master Slider Pro <= 3.6.5 - Unauthenticated PHP Object Injection
Media
CVE-2023-47544
Atarim <= 3.12 - Unauthenticated Cross-Site Scripting
Media
CVE-2023-47650
Add Local Avatar <= 12.1 - Cross-Site Request Forgery via manage_avatar_cache
Media
CVE-2023-4642
kk Star Ratings <= 5.4.5 - Race Condition to Multiple User Voting
Alta
CVE-2023-5583
WP Simple Galleries <= 1.34 - Authenticated (Contributor+) PHP Object Injection
Crítica
CVE-2023-5340
Five Star Restaurant Menu and Food Ordering <= 2.4.10 - Unauthenticated PHP Object Injection
Media
CVE-2023-5140
Bonus for Woo <= 5.8.2 - Reflected Cross-Site Scripting
Media
CVE-2023-46621
User Avatar <= 1.4.11 - Reflected Cross-Site Scripting
Media
CVE-2023-46639
kk Star Ratings <= 5.4.5 - Missing Authorization
Alta
CVE-2023-46615
KD Coming Soon <= 1.7 - Unauthenticated PHP Object Injection via cetitle
Alta
CVE-2023-46154
E2Pdf <= 1.20.18 - Authenticated (Administrator+) PHP Object Injection
Alta
CVE-2023-46147
Themify Ultra <= 7.3.5 - Authenticated (Subscriber+) PHP Object Injection
Media
CVE-2023-45641
Caret Country Access Limit <= 1.0.2 - Cross-Site Request Forgery
Baja
CVE-2023-45105
affiliate-toolkit – WordPress Affiliate Plugin <= 3.3.9 - Open Redirect via atkpout.php
Alta
CVE-2023-45071
Form Maker by 10Web <= 1.15.18 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2023-44150
ProfilePress <= 4.13.2 - Information Disclosure via Debug Log
Media
CVE-2023-5295
Comments by Startbit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Alta
CVE-2023-3154
WordPress Gallery Plugin – NextGEN Gallery <= 3.38 - Authenticated (Admin+) PHAR Deserialization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.