Media
CVE-2023-49164
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2023-48765
Email Address Encoder 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-5672
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) Arbitrary File Read
Media
CVE-2023-49149
Currency Converter Calculator <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Media
CVE-2023-48321
Accelerated Mobile Pages <= 1.0.88.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Media
CVE-2023-49158
LadiApp <= 4.3 - Missing Authorization
Media
CVE-2023-49157
Multiple Post Passwords <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-5803
Business Directory Plugin <= 6.3.10 - Cross-Site Request Forgery
Media
CVE-2023-48761
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization
Media
CVE-2023-5980
BSK Forms Blacklist <= 3.6.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Media
CVE-2023-49160
Formzu WP <= 1.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id
Media
CVE-2023-48778
Product Size Chart For WooCommerce <= 1.1.5 - Cross-Site Request Forgery via get_save_option
Alta
CVE-2023-48760
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action
Media
CVE-2023-49154
Button Generator – easily Button Builder <= 2.3.8 - Missing Authorization
Media
CVE-2023-44983
Aruba HiSpeed Cache <= 2.0.6 - Sensitive Information Exposure via Log File
Media
CVE-2023-44991
Media File Renamer <= 5.6.9 - Sensitive Information Exposure via Log File
Media
CVE-2023-48781
MkRapel Regiones y Ciudades de Chile para WC <= 4.3.0 - Cross-Site Request Forgery via multiple functions
Media
CVE-2023-48768
Quantity Plus Minus Button for WooCommerce by CodeAstrology <= 1.1.9 - Cross-Site Request Forgery via wqpmb_form_submit
Alta
CVE-2023-5645
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL injection via key
Media
CVE-2023-48276
WP Forms Puzzle Captcha <= 4.1 - Captcha Bypass
Media
CVE-2023-48774
IdeaPush <= 8.57 - Missing Authorization
Alta
CVE-2023-48775
WP Cleanfix <= 5.6.2 - Missing Authorization via register
Media
CVE-2023-48780
WP Catalogue <= 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Media
CVE-2023-48773
WooCommerce Login Redirect <= 2.2.4 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.