Seguridad WordPress

Base de datos de vulnerabilidades

Fuente base: WPScan. Cada ficha puede incluir enriquecimiento editorial con IA para contexto técnico, impacto y mitigación.

Buscar

Tipo

Severidad

41.826 vulnerabilidades

wordpress

389

plugin

38325

theme

3112

MEDIUM CVSS 6.4

PLUGIN xss CVE-2024-2186

Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget

wpzoom-addons-for-beaver-builder

Publicado: 13/03/2024

Se ha identificado una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el plugin Beaver Builder Addons by WPZOOM, que afecta a las versiones hasta la…

MEDIUM CVSS 6.4

PLUGIN xss CVE-2024-2183

Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget

wpzoom-addons-for-beaver-builder

Publicado: 13/03/2024

Se ha identificado una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el plugin Beaver Builder Addons de WPZOOM, que afecta a las versiones hasta la…

MEDIUM CVSS 6.4

PLUGIN xss CVE-2024-1464

Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Slider Widget

addons-for-elementor

Publicado: 13/03/2024

Se ha identificado una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el plugin 'Elementor Addons by Livemesh' en versiones hasta la 8.3.4. Esta vul…

MEDIUM CVSS 6.4

PLUGIN xss CVE-2024-1465

Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Carousel Widget

addons-for-elementor

Publicado: 13/03/2024

Se ha identificado una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el plugin 'Elementor Addons by Livemesh' en versiones anteriores a la 8.3.6. E…

MEDIUM CVSS 6.4

PLUGIN xss CVE-2024-1461

Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget

addons-for-elementor

Publicado: 13/03/2024

Se ha identificado una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el plugin 'Elementor Addons by Livemesh' en versiones anteriores a la 8.3.6. E…

MEDIUM CVSS 6.4

PLUGIN xss CVE-2024-1458

Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Widget

addons-for-elementor

Publicado: 13/03/2024

Se ha identificado una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el plugin 'Elementor Addons by Livemesh' en versiones hasta la 8.3.4. Este fal…

MEDIUM CVSS 6.4

PLUGIN xss CVE-2024-2138

JetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget

jetwidgets-for-elementor

Publicado: 13/03/2024

Se ha identificado una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el plugin JetWidgets para Elementor, que afecta a las versiones hasta la 1.0.1…

CRITICAL CVSS 9.8

PLUGIN authbypass CVE-2024-27957

Pie Register <= 3.8.3.2 - Unauthenticated Arbitrary File Upload

pie-register

Publicado: 13/03/2024

Se ha identificado una vulnerabilidad crítica en el plugin Pie Register, que permite la carga arbitraria de archivos sin autenticación. Esta falla afecta …

MEDIUM CVSS 6.1

PLUGIN xss CVE-2024-2325

Link Library <= 7.6.6 - Reflected Cross-Site Scripting

link-library

Publicado: 13/03/2024

Se ha identificado una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el plugin Link Library, afectando a las versiones hasta 7.6.6. Esta falla perm…

MEDIUM CVSS 5.4

PLUGIN csrf CVE-2024-0592

Accordion <= 2.2.96 - Missing Authorization to Authenticated(Contributor+) Post Duplication

accordions

Publicado: 13/03/2024

Se ha identificado una vulnerabilidad en el plugin Accordion, que afecta a las versiones anteriores a la 2.2.97. Esta vulnerabilidad permite la duplicació…

MEDIUM CVSS 6.4

PLUGIN xss CVE-2024-2185

Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget

wpzoom-addons-for-beaver-builder

Publicado: 13/03/2024

Se ha identificado una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el plugin Beaver Builder Addons de WPZOOM, que afecta a las versiones hasta 1.…

Base de datos de vulnerabilidades

Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget

Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget

Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Slider Widget

Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Carousel Widget

Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget

Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Widget

JetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget

Pie Register <= 3.8.3.2 - Unauthenticated Arbitrary File Upload

Link Library <= 7.6.6 - Reflected Cross-Site Scripting

Related Posts for WordPress <= 2.2.1 - Cross-Site Request Forgery

Accordion <= 2.2.96 - Missing Authorization to Authenticated(Contributor+) Post Duplication

Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget