Media
CVE-2024-37433
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Media
CVE-2024-37415
E2Pdf – Export To Pdf Tool for WordPress <= 1.20.27 - Missing Authorization
Media
CVE-2024-37434
Atarim <= 3.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2024-37423
Newspack Blocks <= 3.0.8 - Authenticated (Contributor+) Arbitrary Directory Deletion
Alta
CVE-2024-2386
WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL Injection
Media
CVE-2024-37443
WP Job Manager - Resume Manager <= 2.1.0 - Missing Authorization
Media
CVE-2024-37277
Paid Memberships Pro <= 3.0.4 - Unauthenticated Insecure Direct Object Reference to Order Status Update
Media
CVE-2024-37430
Patreon WordPress <= 1.9.0 - Protection Mechanism Bypass
Media
CVE-2024-37428
WidgetKit <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-37416
WP Photo Album Plus <= 8.8.00.002 - Reflected Cross-Site Scripting
Media
CVE-2023-4017
Goya <= 1.0.8.7 - Unauthenticated Reflected Cross-Site Scripting via Multiple Parameters
Media
CVE-2024-5192
Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Media
CVE-2024-37439
Uncanny Toolkit Pro for LearnDash <= 4.1.4 - Missing Authorization to Arbitrary Page/Post Duplication
Crítica
CVE-2024-37424
Newspack Blocks <= 3.0.8 - Authenticated (Contributor+) Arbitrary File Upload
Media
CVE-2024-37444
Defender Security <= 4.7.2 - Missing Authorization
Media
CVE-2024-37239
Branda <= 3.4.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2024-37276
Featured Image from URL <= 4.8.1 - Missing Authorization
Media
CVE-2024-35656
Elementor Pro <= 3.21.2 - Reflected Cross-Site Scripting
Media
CVE-2024-37440
Church Admin <= 4.4.4 - Missing Authorization
Media
CVE-2023-7269
ArtPlacer Widget <= 2.21.1 - Cross-Site Request Forgery
Media
CVE-2024-37431
Mesmerize <= 1.6.120 - Cross-Site Request Forgery to Cache Clearing
Media
CVE-2024-5942
Page and Post Clone <= 6.0 - Insecure Direct Object Reference to Authenticated (Author+) Sensitive Information Exposure
Media
CVE-2024-37429
Login with phone number <= 1.7.35 - Authenticated (Administrator+) Stored Cross-Site Scripting
Alta
CVE-2024-39705
ntlk unsafe deserialization vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.