Media
CVE-2023-37868
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Alta
CVE-2023-37866
JetFormBuilder <= 3.0.8 - Authenticated (Author+) Privilege Escalation
Media
CVE-2023-0602
Twittee Text Tweet <= 1.0.8 - Reflected Cross-Site Scripting
Media
CVE-2023-37869
Premium Addons PRO <= 2.9.0 - Missing Authorization
Media
CVE-2015-10120
WDS Multisite Aggregate <= 1.0.0 - Reflected Cross-Site Scripting
Media
CVE-2023-28779
Terms Descriptions <= 3.4.4 - Reflected Cross-Site Scripting via term_search
Media
CVE-2023-3508
WooCommerce Pre-Orders <= 2.0.2 - Cross-Site Request Forgery
Media
CVE-2022-4888
Multiple Addify Plugins <= (Various Versions) - Cross-Site Request Forgery
Alta
CVE-2023-2078
Buy Me a Coffee – Button and Widget Plugin <= 3.7 - Missing Authorization
Media
CVE-2023-37873
WooCommerce Ship to Multiple Addresses <= 3.8.5 - Reflected Cross-Site Scripting
Media
CVE-2022-47424
ARMember <= 4.0.5 - Cross-Site Request Forgery
Media
CVE-2023-37871
WooCommerce GoCardless Gateway <= 2.5.6 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2023-25036
Social Media Icons Widget <= 1.6 - Cross-Site Request Forgery
Media
CVE-2023-37872
WooCommerce Ship to Multiple Addresses <= 3.8.5 - Missing Authorization
Media
CVE-2023-37865
Download IP2Location Country Blocker <= 2.29.1 - Bypass via IP Spoofing
Media
CVE-2023-3130
Short URL <= 1.6.4 - Authenticated(Admin+) Stored Cross-Site Scripting
Alta
CVE-2023-3158
Mail Control <= 0.2.8 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Alta
CVE-2023-2079
Buy Me a Coffee – Button and Widget Plugin <= 3.7 - Cross-Site Request Forgery
Media
CVE-2015-10119
View All Post's Pages <= 0.9.0 - Reflected Cross-Site Scripting
Media
CVE-2023-3292
Grid Kit Premium < 2.2.0 - Reflected Cross-Site Scripting
Media
CVE-2023-37870
WooCommerce Warranty Requests <= 2.1.9 - Missing Authorization
Media
50b26952-bf59-4236-93b4-6b4928609c15
WPFunnels <= 2.7.15 - Insecure Direct Object Reference
Media
CVE-2023-25488
WP Default Feature Image <= 1.0.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Media
23924342-3b1d-4360-bd87-104091283e35
BuddyBuilder - BuddyPress Builder for Elementor <= 1.7.3 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.