Resumen de las últimas 20 vulnerabilidades


Ayuda Ayuda

Identificador
Título
Fabricante
Fecha

CCN-CERT-1901-25960
UserPro <= 4.9.20 - User Registration With Administrator Role
Wordpress
23-01-2019
CCN-CERT-1901-25961
WooCommerce <= 3.5.0 - Authenticated Stored XSS
Wordpress
23-01-2019
CCN-CERT-1901-25962
WP Job Manager <= 1.31.2 - Phar Deserialization
Wordpress
23-01-2019
CCN-CERT-1901-25963
Adicon Server <= 1.2 - SQL Injection
Wordpress
23-01-2019
CCN-CERT-1901-25964
Audio Record 1.0 - Arbitrary File Upload
Wordpress
23-01-2019
CCN-CERT-1901-25965
Baggage Freight Shipping Australia 0.1.0 - Unauthenticated Arbitrary File Upload
Wordpress
23-01-2019
CCN-CERT-1901-25966
Google XML Sitemaps <= 4.0.9 - Authenticated Cross-Site Scripting (XSS)
Wordpress
23-01-2019
CCN-CERT-1901-25967
WP AutoSuggest 0.24 - Unauthenticated SQL Injection
Wordpress
23-01-2019
CCN-CERT-1901-25968
Two Factor Authentication <= 1.3.12 - Disable Two Factor Authentication CSRF
Wordpress
23-01-2019
CCN-CERT-1901-25969
Multi Step Form <= 1.2.5 - Cross-Site Scripting (XSS)
Wordpress
23-01-2019
CCN-CERT-1901-25970
Import users from CSV with meta <= 1.12 - Import Cross-Site Scripting (XSS)
Wordpress
23-01-2019
CCN-CERT-1901-25971
WordPress <= 5.0 - File Upload to XSS on Apache Web Servers
Wordpress
23-01-2019
CCN-CERT-1901-25494
WordPress <= 5.0 - Authenticated File Delete
Wordpress
22-01-2019
CCN-CERT-1901-25495
Jetpack <= 6.4.2 - Authenticated Stored Cross-Site Scripting (XSS)
Wordpress
22-01-2019
CCN-CERT-1901-25496
Orbit Fox by ThemeIsle <= 2.6.3 -Does not properly Authenticate REST API Calls
Wordpress
22-01-2019
CCN-CERT-1901-25497
WooCommerce <= 3.4.5 - Authenticated Phar Deserialization
Wordpress
22-01-2019
CCN-CERT-1901-25498
WooCommerce <= 3.4.5 - Authenticated Stored XSS
Wordpress
22-01-2019
CCN-CERT-1901-25499
WPForms <= 1.4.8 - Unauthenticated Cross-Site Scripting (XSS)
Wordpress
22-01-2019
CCN-CERT-1901-25500
Download Advanced Custom Fields <= 5.7.7 - Authenticated Cross-Site Scripting (XSS)
Wordpress
22-01-2019
CCN-CERT-1901-25501
Smush Image Compression and Optimization <= 2.9.1 - Authenticated Phar Deserialization
Wordpress
22-01-2019

Miembros de

CERT
FIRST
TF-CSIRT
EGC Group
UE
Red Nacional de SOC
Foro Nacional de Ciberseguridad
CSIRT.es
Ministerio de Defensa
CNI
CNI
CCN-CERT
CNI
CNI