Media
CVE-2023-48325
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2023-5949
Simple Social Media Share Buttons <= 3.8.2 - Unauthenticated Password Protected Post Disclosure
Media
CVE-2023-48318
Contact Form Email <= 1.3.41 - Captcha Bypass
Media
CVE-2023-48283
Simple Testimonials Showcase <= 1.1.6 - Cross-Site Request Forgery
Media
CVE-2023-48336
Easy Social Icons <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Media
CVE-2023-48740
Easy Social Feed <= 6.5.1 - Missing Authorization via hide_free_sidebar()
Media
CVE-2023-48287
TextMe SMS <= 1.9.0 - Missing Authorization via tetxme_update_option_page()
Media
CVE-2023-48281
Broken Link Checker for YouTube <= 1.3 - Cross-Site Request Forgery via plugin_settings_page()
Media
CVE-2023-48737
TriPay Payment Gateway <= 3.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-48326
Events Manager <= 6.4.5 - Reflected Cross-Site Scripting
Media
CVE-2023-48335
Hide login page <= 1.1.7 - Login Page Disclosure
Alta
CVE-2023-48327
WC Vendors Marketplace <= 2.4.7 - Authenticated (Shop manager+) SQL Injection via search dates
Media
CVE-2023-48323
Awesome Support <= 6.1.4 - Cross-Site Request Forgery via wpas_edit_reply_ajax()
Media
CVE-2023-48324
Awesome Support <= 6.1.4 - Missing Authorization via wpas_edit_reply_ajax()
Media
CVE-2023-48286
Accept Stripe Payments <= 2.0.79 - Insecure Direct Object Reference
Media
CVE-2023-48330
Bulk Comment Remove <= 2 - Cross-Site Request Forgery via brc_admin()
Media
CVE-2023-48329
Fast Custom Social Share by CodeBard <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-6136
Debug Log Manager <= 2.2.1 - Missing Authorization
Media
CVE-2023-48328
NextGEN Gallery <= 3.37 - Cross-Site Request Forgery
Media
CVE-2023-48332
Mail Bank - #1 Mail SMTP Plugin for WordPress <= 4.0.14 - Missing Authorization
Media
CVE-2023-48285
Accept Stripe Payments <= 2.0.79 - Unauthenticated Content Injection
Media
CVE-2023-41128
WP Roadmap <= 1.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-6137
Frontier Post <= 6.1 - Cross-Site Request Forgery
Media
CVE-2023-48317
Display Custom Post <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.