Crítica
CVE-2024-25927
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.533
Sin evaluar
810
osTicky2 - Other
Sin evaluar
CVE-2024-13245
drupal/ckeditor_lts - SA-CONTRIB-2024-009
Media
CVE-2024-25125
Absolute path traversal vulnerability in digdag server
Media
CVE-2024-25917
WP Setup Wizard <= 1.0.8.1 - Authenticated (Subscriber+) Full Database Download
Media
CVE-2024-25921
Action Network <= 1.4.2 - Reflected Cross-Site Scripting via 'search'
Media
CVE-2024-25919
Custom Field Template <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via $search_label
Media
CVE-2024-1126
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Attendee List Retrieval
Media
CVE-2024-0604
Best WordPress Gallery Plugin – FooGallery <= 2.4.7 -Authenticated(Administrator+) Stored Cross-Site Scripting via settings
Media
CVE-2024-25920
WP SMS <= 6.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2024-25923
Community by PeepSo <= 6.2.7.0 - Unauthenticated Sensitive Information Disclosure via Log file
Media
CVE-2024-0621
Simple Share Buttons Adder <= 8.4.11 - Authenticated(Administrator+) Stored Cross-Site Scripting via CSS Settings
Media
CVE-2024-1487
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Competition Plugin for WordPress <= 21.3.0 - Authenticated (Author+) Stored Cross-Site Scripting
Media
CVE-2024-0708
Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages <= 1.7.2 - Unauthenticated Information Exposure
Media
CVE-2023-50905
WP Activity Log <= 4.6.1 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2024-1349
EmbedPress <= 3.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Crítica
CVE-2024-25925
WooCommerce Easy Checkout Field Editor, Fees & Discounts <= 3.5.12 - Unauthenticated Arbitrary File Upload
Media
CVE-2024-1425
EmbedPress <= 3.9.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Google Calendar Widget Link
Media
CVE-2024-1127
EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Event Export
Media
CVE-2024-25922
Peach Payments Gateway <= 3.1.9 - Missing Authorization via peach_core_version_rollback()
Alta
CVE-2024-25918
InstaWP Connect <= 0.1.0.8 - Authenticated (Subscriber+) Remote Code Execution
Media
CVE-2024-0326
Premium Addons for Elementor <= 4.10.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via onClick Events
Alta
CVE-2024-24707
Cwicly <= 1.4.0.2 - Authenticated (Contributor+) Remote Code Execution
Media
CVE-2024-1447
Sydney Toolbox <= 1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.