Media
CVE-2024-29103
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Media
CVE-2024-29096
MJM Clinic <= 1.1.22 - Authenticated (Editor+) Stored Cross-Site Scripting
Alta
CVE-2024-1685
Social Media Share Buttons <= 2.1.0 - Authenticated (Subscriber+) PHP Object Injection
Media
CVE-2024-27988
WEN Responsive Columns <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2024-27989
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-29092
Permalink Manager Lite <= 2.4.3 - Reflected Cross-Site Scripting
Media
CVE-2024-29107
Elementor Addon Elements <= 1.12.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2024-1813
Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields
Media
CVE-2024-29104
Ticket Tailor <= 1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-29105
WP Popups <= 2.1.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2024-27992
Link Whisper Free <= 0.6.8 - Reflected Cross-Site Scripting
Media
CVE-2024-27991
SupportCandy <= 3.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2024-29093
Builder for WooCommerce reviews shortcodes – ReviewShort <= 1.01.3 - Cross-Site Request Forgery
Media
CVE-2024-2308
ElementInvader Addons for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2024-29094
HT Easy GA4 ( Google Analytics 4 ) <= 1.1.7 - Reflected Cross-Site Scripting
Media
CVE-2024-27998
Barcode Scanner with Inventory & Order Manager <= 1.5.3 - Reflected Cross-Site Scripting
Media
CVE-2024-1857
Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates <= 2.6.6 - Missing Authorization to Unauthenticated Information Exposure
Media
CVE-2024-29097
User profile <= 2.0.20 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2024-29095
Site Reviews <= 6.11.6 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2024-1733
Word Replacer Pro <= 1.0 - Missing Authorization to Unauthenticated Arbitrary Content Update
Media
CVE-2024-1904
MasterStudy LMS <= 3.2.13 - Missing Authorization to Sensitive Information Exposure in search_posts
Media
CVE-2024-1239
ElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2024-22203
Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the `element` method in `app/routes.py` does not validate the user-controlled `src_type` and `element_url` variables and
Crítica
CVE-2024-22205
Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `window` endpoint does not sanitize user-supplied input from the `location` variable and passes it to the `send` met
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.