Media
CVE-2024-49221
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2024-49228
bVerse Convert <= 1.3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2024-49227
Free Stock Photos Foter <= 1.5.4 - Authenticated (Subscriber+) PHP Object Injection
Media
CVE-2024-49238
ADIF Log Search Widget <= 1.0f - Reflected Cross-Site Scripting
Media
CVE-2024-49272
Social Auto Poster <= 5.3.15 - Cross-Site Request Forgery
Crítica
CVE-2024-49216
Feed Comments Number <= 0.2.1 - Unauthenticated Arbitrary File Upload
Media
CVE-2024-49223
CJ Change Howdy <= 3.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Crítica
CVE-2024-49247
BuddyPress Better Registration <= 1.6 - Authentication Bypass to Administrator
Alta
CVE-2024-49226
TAKETIN To WP Membership <= 2.8.12 - Authenticated (Subscriber+) PHP Object Injection
Media
CVE-2024-49231
WordPress Video <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-49265
Booking.com Banner Creator <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-49230
Ajax Custom CSS/JS <= 2.0.4 - Reflected Cross-Site Scripting
Media
CVE-2024-49248
Ad Inserter <= 2.7.37 - Reflected Cross-Site Scripting
Media
CVE-2024-49267
Unlimited Addon For Elementor <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-49233
MAS Elementor <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2024-49219
RS-Members <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation
Media
CVE-2024-9926
Jetpack < 13.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure
Media
CVE-2024-49236
Crazy Call To Action Box <= 1.05 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-49237
Ahmeti Wp Timeline <= 5.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Media
CVE-2024-49225
wpPricing Builder <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alta
CVE-2024-49246
Ajax Rating with Custom Login <= 1.1 - Unauthenticated SQL Injection
Crítica
CVE-2024-49218
Recently <= 1.1 - Unauthenticated PHP Object Injection
Media
CVE-2024-49232
El mejor Cluster <= 1.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-49266
WP-Spreadplugin <= 4.8.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.