Alta
ghsa-g3j5-mpp2-2fqm
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
ghsa-3w9w-9833-gcpv
Security bug in ConvertToSinglePlane when used with untrusted content from the DDS loader
Media
CVE-2021-21395
magento-lts Reset Password not protected against well-timed CSRF
Media
CVE-2022-4784
Hueman Addons <= 2.3.3 - Authenticated (Contributor+) Stored Cross Site Scripting
Media
f440a5c5-2a48-4beb-849f-3f7cde5a8653
Gerencianet Oficial <= 1.4.8 - Missing Authorization
Media
CVE-2023-0073
Client Logo Carousel <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-0064
eVision Responsive Column Layout Shortcodes <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
9fdc9d20-a1cf-4a58-b250-4f3f56b77b69
WP OAuth Server (OAuth Authentication) <= 4.2.5 -Cross-Site Request Forgery
Media
5edaf310-c410-47dd-89cf-9aa15ab97acd
Gerencianet Oficial <= 1.4.8 - Cross-Site Request Forgery
Alta
CVE-2023-0168
Olevmedia Shortcodes <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2022-4777
BootStrap Shortcode <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media
CVE-2023-1016
Intuitive Custom Post Order <= 3.1.4.1 - Authenticated (Admin+) SQL Injection
Media
CVE-2023-0172
Juicer <= 1.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2022-4752
Opening Hours <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
b19d0156-1fd9-4c18-be47-bce633b2f704
Intuitive Custom Post Order <= 3.1.3 - Missing Authorization to Authenticated Settings Change
Media
CVE-2023-28687
Cream Blog, Fascinate, Glaze Blog Lite, & Everest News (All Versions) - Cross-Site Scripting
Media
CVE-2022-4622
Login Logout Menu <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-0167
GetResponse for WordPress <= 5.5.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2022-4754
Easy Social Box / Page Plugin <= 4.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-23715
JobBoardWP <= 1.2.2 - Missing Authorization to Job Posting Manipulation
Alta
4f3f0ef8-8a13-4110-a402-e1bcf493560a
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.12.23 - Unauthenticated SQL Injection
Media
CVE-2023-0366
Loan Comparison <= 1.5.2 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode
Media
CVE-2022-4761
Post Views Count <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2023-0442
Loan Comparison <= 1.5.1 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.