Media
CVE-2024-39652
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Media
CVE-2024-8542
Everest Forms <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2024-39663
WP Fast Total Search <= 1.68.232 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2024-39659
WP-PostRatings <= 1.91.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2024-7389
Forminator <= 1.29.1 - HubSpot Developer API Key Sensitive Information Exposure
Media
CVE-2024-39657
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.6.18 - Cross-Site Request Forgery
Media
CVE-2024-39660
Photo Engine <= 6.3.1 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2024-6346
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date Countdown Widget
Media
CVE-2024-7302
Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
Media
CVE-2024-5331
Breakdance <= 1.7.2 - Missing Authorization
Media
CVE-2024-5330
Breakdance <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-2455
Element Pack - Addon for Elementor Page Builder WordPress Plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL
Media
CVE-2024-2090
Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery
Alta
CVE-2024-6698
FundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalation
Media
CVE-2024-8493
The Events Calendar <= 6.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2024-6687
CTT Expresso para WooCommerce <= 3.2.12 - Information Exposure via Unprotected Directory
Alta
CVE-2024-6770
Lifetime free Drag & Drop Contact Form Builder for WordPress VForm <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2024-5901
SiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget
Media
CVE-2024-7135
Tainacan <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Media
CVE-2024-6725
Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2024-6208
Download Manager <= 3.2.97 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2024-2508
WP Mobile Menu <= 2.8.4.4 - Missing Authorization to _mobmenu_icon Post Meta Modification
Crítica
CVE-2024-39638
Registrations for the Events Calendar – Event Registration Plugin <= 2.12.2 - Authenticated (Contributor+) SQL Injection
Media
CVE-2024-7100
Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.