Crítica
CVE-2024-25738
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Crítica
CVE-2024-25737
VuFind Server-Side Request Forgery (SSRF) vulnerability
Alta
ghsa-3mm9-2p44-rw39
Silverstripe SiteTree Creation Permission Vulnerability
Media
ghsa-r97r-64vp-fghm
Silverstripe XSS vulnerability via VirtualPage
Media
CVE-2024-29392
Silverpeas Core vulnerable to Cross Site Scripting
Alta
CVE-2024-34448
Ghost allows CSV Injection during member CSV export
Media
ghsa-6hh6-59j2-qrxw
Silverstripe History XSS Vulnerability
Baja
ghsa-779c-7w4p-2c4g
Silverstripe admin XSS Vulnerability via WYSIWYG editor
Media
CVE-2024-4043
WP Ultimate Post Grid <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-text Shortcode
Media
CVE-2024-3711
Brizy – Page Builder <= 2.4.43 - Missing Authorization
Media
CVE-2024-5177
Hash Elements <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter in Multiple Widgets
Media
CVE-2024-3626
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 - Missing Authorization
Sin evaluar
CVE-2024-13257
drupal/commerce_view_receipt - SA-CONTRIB-2024-021
Sin evaluar
CVE-2024-13256
drupal/email_contact - SA-CONTRIB-2024-020
Media
CVE-2024-4431
LA-Studio Element Kit for Elementor <= 1.3.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Media
CVE-2024-4895
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.12 - Unauthenticated Stored Cross-Site Scripting via CSV Import
Media
CVE-2024-3201
WP DSGVO Tools (GDPR) <= 3.1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2024-1855
WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery
Media
CVE-2024-3065
PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2024-4783
jQuery T(-) Countdown Widget <= 2.3.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via tminus Shortcode
Media
CVE-2024-4486
Awesome Contact Form7 for Elementor <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via AEP Contact Form 7 Widget
Media
CVE-2024-4378
Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Menu and Shape Divider
Crítica
CVE-2024-5084
Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution
Media
CVE-2024-1814
Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Block
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.