Base de Datos de Vulnerabilidades de WordPress

Urgent: Privilege Escalation in Automation By Autonami (FunnelKit) — What WordPress Site Owners Must Do Now Plugin Name…

WordPress Nexter Blocks plugin <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability

WordPress WPC Smart Compare for WooCommerce plugin <= 6.4.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability

WordPress FunnelKit plugin <= 3.11.0.2 - Privilege Escalation vulnerability

WordPress Real Spaces - Plugin de Directorio de Propiedades de WordPress <= 3.6 - Escalación de Privilegios No Autenticada a Administrador a través de la vulnerabilidad 'imic_agent_register'

Plugin de redimensionamiento de imágenes de Cloudflare para WordPress <= 1.5.6 - Falta de autenticación para la ejecución remota de código no autenticado a través de la vulnerabilidad del gancho rest_pre_dispatch

Plugin de mapas flexibles de WordPress <= 1.18.0 - Autenticado (Contribuyente+) Almacenado Cross-Site Scripting a través de la vulnerabilidad del shortcode de mapas flexibles

WordPress Real Spaces - WordPress Properties Directory Theme plugin <= 3.5 - Authenticated (Subscriber+) Privilege Escalation to Administrator via 'change_role_member' vulnerability

WordPress Media Library Assistant plugin <= 3.27 - Authenticated (Author+) Limited File Deletion vulnerability

Plugin Emmet de WordPress WP <= 0.3.4 - Vulnerabilidad de Cross Site Scripting (XSS)