Media
CVE-2024-8378
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
CVE-2024-10027
WP Booking Calendar <= 10.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2024-9703
Arconix Shortcodes <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2024-9206
MAS Companies For WP Job Manager <= 1.0.13 - Reflected Cross-Site Scripting
Media
CVE-2024-10078
WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
Alta
CVE-2024-10079
WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) PHP Object Injection
Crítica
CVE-2024-49327
Woostagram Connect <= 1.0.2 - Unauthenticated Arbitrary File Upload
Crítica
CVE-2024-49607
WP Dropbox Dropins <= 1.0 - Unauthenticated Arbitrary File Upload
Media
CVE-2024-49325
Photo Gallery Builder <= 3.0 - Missing Authorization
Crítica
CVE-2024-49332
Giveaway Boost <= 2.1.4 - Unauthenticated PHP Object Injection
Crítica
CVE-2024-49611
Product Website Showcase <= 1.0 - Unauthenticated Arbitrary File Upload
Media
CVE-2024-10076
Jetpack <= 13.7 & Jetpack Boost <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-10075
Jetpack <= 13.7 - Unauthenticated Arbitrary Block & Shortcode Execution
Crítica
CVE-2024-49326
Affiliator <= 2.1.3 - Unauthenticated Arbitrary File Upload
Crítica
CVE-2024-49610
photokit <= 1.0 - Unauthenticated Arbitrary File Upload
Crítica
CVE-2024-49324
Sovratec Case Management <= 1.0.0 - Unauthenticated Arbitrary File Upload
Alta
CVE-2024-49330
Nice Backgrounds <= 1.0 - Authenticated (Subscriber+) Arbitrary File Upload
Alta
CVE-2024-49331
Property Lot Management System <= 1.0 - Authenticated (Salesman+) Arbitrary File Upload
Crítica
CVE-2024-49328
WP REST API FNS <= 1.0.0 - Privilege Escalation
Media
CVE-2024-10080
WP Easy Post Types <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta
Crítica
CVE-2024-49604
Simple User Registration <= 6.7 - Missing Authorization to Account Takeover
Media
CVE-2024-49323
All in One Slider <= 1.1 - Reflected Cross-Site Scripting
Crítica
CVE-2024-49329
WP REST API FNS <= 1.0.0 - Unauthenticated Arbitrary File Upload
Media
CVE-2024-9898
Parallax Image <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via dd-parallax Shortcode
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.