Alta
Explotada en ataques
CVE-2022-0609
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Alta
CVE-2022-23647
Cross-site Scripting in Prism
Media
CVE-2022-25600
WP MAPS – Easiest & Most Advanced WordPress Plugin for Google Maps <= 4.2.3 - Cross-Site Request Forgery
Media
CVE-2022-25603
MaxGalleria <= 6.2.5 - Stored Cross-Site Scripting
Media
CVE-2022-0691
url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.
Media
CVE-2022-0590
BulletProof Security <= 5.7 - Admin+ Stored Cross-Site Scripting
Alta
5cbf597e-7a2f-416c-8969-3679b487f57a
WooCommerce <= 6.2.0 - Path Traversal via Tax Importer
Alta
CVE-2021-24905
Advanced Contact form 7 DB <= 1.8.6 - Authenticated Arbitrary File Deletion
Media
CVE-2022-0775
WooCommerce <= 6.2.0 - Incorrect Authorization Checks on REST API Endpoints
Crítica
CVE-2022-0686
Authorization Bypass Through User-Controlled Key in url-parse
Baja
CVE-2022-0688
Business Logic Errors in microweber
Crítica
CVE-2022-23848
Command injection in Alluxio
Media
CVE-2022-0648
Team Circle Image Slider With Lightbox <= 1.0.15 - Reflected Cross-Site Scripting
Alta
CVE-2022-0478
Event Manager and Tickets Selling for WooCommerce < 3.5.8 - SQL Injection
Media
CVE-2022-0701
Seo 301 Meta <= 1.9.1 - Stored Cross-Site Scripting
Media
CVE-2022-0702
Petfinder Listings <= 1.0.19 - Admin+ Stored Cross-Site Scripting
Media
CVE-2022-0703
GD Mylist <= 1.1.1 - Stored Cross-Site Scripting
Media
CVE-2022-0684
WP Home Page Menu < 3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Crítica
CVE-2022-0658
CommonsBooking < 2.6.8 - Unauthenticated SQL Injection
Media
8ea0e5ae-c8b8-4782-a130-e5460a81b066
Hide Admin Bar Based On User Roles < 3.1.0 - Cross-Site Request Forgery
Media
CVE-2022-0327
Master Addons for Elementor <= 1.8.1 - Reflected Cross-Site Scripting
Media
CVE-2022-0700
Simple Tracking <= 1.6 - Stored Cross-Site Scripting
Alta
CVE-2022-0248
Contact Form Submissions <= 1.7.2 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2022-0503
Multisite Content Copier/Updater Pro < 2.1.2 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.