Media
CVE-2024-11940
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Alta
CVE-2023-6947
Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory Traversal
Crítica
CVE-2024-53947
Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions
Media
CVE-2024-53948
Apache Superset: Error verbosity exposes metadata in analytics databases
Media
CVE-2024-53949
Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled
Media
CVE-2024-55565
Predictable results in nanoid generation when given non-integer values
Media
CVE-2024-12323
turboSMTP <= 4.6 - Reflected Cross-Site Scripting via 'page'
Media
CVE-2024-11106
Simple Restrict <= 1.2.7 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Media
CVE-2024-11868
LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API
Alta
CVE-2024-11205
WPForms 1.8.4 - 1.9.2.1 - Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation
Media
CVE-2024-11841
Tithe.ly Giving Button <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2024-12209
WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion
Media
CVE-2025-24567
WP Mailster <= 1.8.16.0 - Unauthenticated Sensitive Information Exposure
Media
CVE-2024-11464
Easy Code Snippets <= 1.0.2 - Reflected Cross-Site Scripting
Alta
CVE-2024-11501
Gallery <= 1.3 - Authenticated (Contributor+) PHP Object Injection
Media
CVE-2024-11457
Feedpress Generator – External RSS Frontend Customizer <= 1.2.1 - Reflected Cross-Site Scripting
Media
CVE-2024-11380
Mini Program API <= 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2024-12270
Beautiful Taxonomy Filters <= 2.4.3 - Unauthenticated SQL Injection
Media
CVE-2024-11367
Smoove connector for Elementor forms <= 4.1.0 - Reflected Cross-Site Scripting
Media
CVE-2024-11374
TWChat – Send or receive messages from users <= 4.0.4 - Reflected Cross-Site Scripting
Media
CVE-2024-12128
Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Reflected Cross-Site Scripting via monthly_sales_current_year Parameter
Media
CVE-2024-12253
Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update / Data Access
Alta
CVE-2024-11010
FileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusion
Alta
CVE-2024-54141
phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.