Media
CVE-2024-12448
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2024-11876
Kredeum NFTs, the easiest way to sell your NFTs directly on your WordPress site <= 1.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-11855
Koalendar – Events & Appointments Booking Calendar <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via height Parameter
Media
CVE-2024-11867
Companion Portfolio – Responsive Portfolio Plugin <= 2.4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-12523
States Map US <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2024-21543
Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, gra
Media
CVE-2024-21544
Browsershot Local File Inclusion
Media
CVE-2024-12422
Import Eventbrite Events <= 1.7.4 - Reflected Cross-Site Scripting
Media
CVE-2024-12459
Ganohrs Toggle Shortcode <= 0.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-11712
WP Job Portal <= 2.2.2 - Missing Authorization to Unauthenticated Arbitrary Resume Download
Alta
CVE-2024-11721
Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Privilege Escalation
Media
CVE-2024-11752
Eveeno <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-12474
GeoDataSource Country Region DropDown <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2025-24574
PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site Scripting
Media
CVE-2024-12411
WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More <= 2.5.4 - Reflected Cross-Site Scripting
Media
CVE-2024-55864
My WP Customize Admin/Frontend <= 1.24.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-11710
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection
Alta
CVE-2024-11720
Frontend Admin by DynamiApps <= 3.24.5 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2024-11763
Plezi <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-11266
Geocache Stat Bar Widget <= 0.911 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-10690
Shortcodes for Elementor <= 1.0.4 - Authenticated (Contributor+) Post Disclosure
Alta
CVE-2024-11711
WP Job Portal <= 2.2.1 - Unauthenticated SQL Injection
Media
CVE-2024-11714
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via getFieldsForVisibleCombobox()
Media
CVE-2024-11713
WP Job Portal <= 2.2.2 - Authenticated (Admin+) SQL Injection via wpjobportal_deactivate()
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.