Media
CVE-2023-47664
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2023-47665
Plainview Protect Passwords <= 1.4 - Reflected Cross-Site Scripting
Media
CVE-2023-47505
Elementor Website Builder <= 3.16.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_inline_svg()
Media
CVE-2023-32957
Team Members Showcase <= 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-47667
WP Full Stripe Free <= 7.0.17 - Cross-Site Request Forgery
Media
CVE-2023-32796
WooCommerce Product Enquiry <= 2.6.0 - Unauthenticated Self-Based Cross-Site Scripting
Media
CVE-2023-47670
Korea SNS <= 1.6.4 - Cross-Site Request Forgery via kon_tergos_options
Media
CVE-2023-47673
Post Pay Counter <= 2.789 - Reflected Cross-Site Scripting
Media
4a134509-8dc0-41ac-9b5c-5b173a1e3c68
Product Catalog Simple <= 1.7.5 - Cross-Site Request Forgery via ic_system_status
Media
CVE-2023-47671
Vertical scroll recent post <= 14.0 - Cross-Site Request Forgery via vsrp_admin_options
Crítica
CVE-2023-46244
XWiki Platform privilege escalation from script right to programming right through title displayer
Alta
CVE-2023-46243
XWiki Platform vulnerable to privilege escalation and remote code execution via the edit action
Crítica
CVE-2023-46242
XWiki Platform vulnerable to remote code execution via the edit action because it lacks CSRF token
Media
CVE-2023-47552
Image Hover Effects <= 5.5 - Cross-Site Request Forgery
Media
fb6f4b0b-25b8-4dcd-b002-293ce8ab307e
NitroPack <= 1.9.2 - Missing Authorization via multiple AJAX functions
Media
CVE-2023-47513
ARI Stream Quiz <= 1.3.2 - Authenticated(Contributor+) Content Injection
Media
CVE-2023-47653
TWB Woocommerce Reviews <= 1.7.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-47644
ProfileGrid <= 5.7.1 - Cross-Site Request Forgery
Media
CVE-2023-47557
Visitors Traffic Real Time Statistics <= 7.2 - Missing Authorization via multiple AJAX actions
Media
f3d5bc99-2b55-4e19-8304-e56f3d4a2f1a
Ecwid Ecommerce Shopping Cart <= 6.12.3 - Missing Authorization on multiple functions
Media
eb94520e-a99d-4e34-b174-e01898de0978
Custom post types <= 4.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-47547
Products, Order & Customers Export for WooCommerce <= 2.0.10 - Reflected Cross-Site Scripting via date parameters
Media
CVE-2023-47660
Product Visibility by Country for WooCommerce <= 1.4.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
CVE-2023-47659
Lava Directory Manager <= 1.1.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.