Media
CVE-2024-10151
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Media
CVE-2024-12121
Broken Link Checker | Finder <= 2.5.0 - Authenticated (Author+) Blind Server-Side Request Forgery
Media
CVE-2024-56060
HTML Forms <= 1.4.1 - Reflected Cross-Site Scripting
Alta
CVE-2024-56067
WP SuperBackup <= 2.3.3 - Missing Authorization to Unauthenticated Back-Up File Download
Crítica
CVE-2024-56071
Simple Dashboard <= 2.0 - Unauthenticated Privilege Escalation
Crítica
CVE-2024-12626
AutomatorWP <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_value
Media
CVE-2024-56207
EditionGuard for WooCommerce – eBook Sales with DRM <= 3.4.2 - Cross-Site Request Forgery to Privilege Escalation
Media
CVE-2024-56206
gap-hub-user-role <= 3.4.1 - Cross-Site Request Forgery
Alta
CVE-2024-56203
Wayne Audio Player <= 1.0 - Cross-Site Request Forgery to Privilege Escalation
Media
CVE-2024-12560
Button Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication
Media
CVE-2024-56062
Royal Elementor Addons <= 1.3.987 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-10548
WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API
Crítica
CVE-2024-56205
AI Magic <= 1.0.4 - Unauthenticated Privilege Escalation
Alta
CVE-2024-56068
WP SuperBackup <= 2.3.3 - Authenticated (Subscriber+) PHP Object Injection
Media
CVE-2024-56070
WP SuperBackup <= 2.3.3 - Missing Authorization
Media
CVE-2024-56069
WP SuperBackup <= 2.3.3 - Reflected Cross-Site Scripting
Crítica
CVE-2024-56061
Computer Repair Shop <= 3.8119 - Authenticated (Customer+) Privilege Esclation via Account Takeover
Media
CVE-2025-24581
Instantio <= 3.3.7 - Missing Authorization to Unauthenticated Settings Update
Crítica
CVE-2024-56064
WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload
Media
CVE-2024-12331
File Manager Pro – Filester <= 1.8.6 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation
Media
CVE-2025-24583
12 Step Meeting List <= 3.16.5 - Missing Authorization to Unauthenticated Settings Update
Alta
CVE-2024-56204
Sinking Dropdowns <= 1.25 - Cross-Site Request Forgery
Media
CVE-2024-12585
Property Hive <= 2.1.0 - Reflected Cross-Site Scripting
Media
CVE-2024-56063
Essential Addons for Elementor <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.