Falta de autorización en Social Gallery Lite y otras 133 tecnologías

Falta de autorización en Social Gallery Lite, Ant Admin Notices for Team, RW Divi Unite Gallery, 404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring, Premmerce Wishlist for WooCommerce, Easy Digital Downloads – Courses, Revolution for Elementor, Before and After Product Images for WooCommerce, Starfish Review Generation & Marketing for WordPress, WP Affiliate Disclosure, Product Tables for WooCommerce: Quickster, Customer Chat Facebook, Advanced Classifieds & Directory Pro, Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery, Get feedback from visitors – WP Feedback Suite Plugin, Ultimeter – the Ultimate Progress and Goals Meter, Delete Duplicate Posts, WooCommerce Next Order Coupon, Multilist Subscribe for Sendy, Content Aware Sidebars – Fastest Widget Area Plugin, Past Events Extension, Post Snippets – Custom WordPress Code Snippets Customizer, Addendio LITE – Find WordPress plugins and themes, Easy Code Snippets, Bani, WordPress Cloaking – Show & Create Geo-Targeted Custom HTML Plugin – GeoRequest, Helpie FAQ — Accordion, Docs & Knowledge Base, Price Bands for WooCommerce, Premmerce Product Filter for WooCommerce, Fast WordPress, Content Slider for WP Posts (Section Slider), Livemesh SiteOrigin Widgets, Perelandra Sermons, Easy Watermark, Import Social Statistics, KRSP Frontend File Uploader, Gravity Forms Sticky List, WP Munich Blocks – Gutenberg Blocks for WordPress, CP Image Gallery, BuddyPress Integration for WooCommerce, Online Booking for Barbershops and Salons, WP fail2ban – Advanced Security, Image Photo Gallery Final Tiles Grid, go-fetch-jobs-jobengine, Affiliate Link Builder Plugin for Amazon Associates – Review Engine, Premmerce Wholesale Pricing for WooCommerce, Lightbox & Modal Popup WordPress Plugin – FooBox, GFireM Advance Search, BAVOKO SEO Tools – All-in-One WordPress SEO, Any Popup – Popup Forms, Optins & Ads, Webheadcoder Multi-Step Forms for Contact Form 7, Speculor, Ultimate Widgets Light, enhanced-catalog-images-for-woocommerce, DeMomentSomTres Classify on Publish, Remove WP Update Nags, Insert or Embed Articulate Content into WordPress, Error Log Monitor, wp-buddha-free-adwords, Content Collector, Nitek Carousel Slider Cool Transitions, FIT: Featured Image Toolkit, Purus, FooGallery Photo Gallery : Image, Video & Masonry Galleries, WP Activity Log, WP Advanced Comment, MailChimp Manager, Stop User Enumeration, Contact Form for WordPress- Cybrosys, WP Private Media, Automatic Post Categories, Social Share Icons & Social Share Buttons, Widgets for SiteOrigin, Device Frame, Global Income Stats from Freemius, TinyMCE Annotate, NEXUS, ConsultPress Lite, Cryptocurrency Portfolio Tracker, Woo Admin Product Notes, WordPress FAQ Plugin – WPWorx, WordPress Animation Plugin – Animated Everything, Magic Content for Siteorigins Pagebuilder, Run time Image resizing, Brand, WooRocks Magic Content, Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder, Master Blocks – Gutenberg Site Builder, Add Pinterest conversion tags for Pinterest Ads + Site verification, Premmerce Variation Swatches for WooCommerce, Livemesh Addons by Elementor, Widgets on Pages and Posts, One Page Blocks, Sprout Clients – CRM and Lead Management, DeMomentSomTres Address, SheetPress – Manage WordPress Meta data with Google Sheets, Page Studio Lite Plugin, Kanzu Support Desk – WordPress Helpdesk Plugin, Funnelmentals, FTC Disclosure, Shuban, Expire tags, Better Robots.txt – AI-Ready Crawl Control & Bot Governance, WP Pro Counter, DeMomentSomTres Grid Archive, WordPress Reviews by ReviewPress, GFireM Fields, Nugget by Ingot: Easy, automated and native A/B testing for everyone, Random Sorting Order for WooCommerce, WP Mobile Menu – The Mobile-Friendly Responsive Menu, Simple Giveaways – Grow your business, email lists and traffic with contests, XPoster – Share to Bluesky and Mastodon, Inbound Brew, CP Simple Newsletter, EDD Tab Manager, Product Feed Manager for WooCommerce – RexFeed – Sell on 200+ Shopping Channels, WP Photo Effects, DeMomentSomTres Categories, GFireM Action After, Custom Registration and Custom Login Forms with New Recaptcha, Turbo Widgets, WP Relevant Ads, a-staff – Team member showcase plugin for WordPress, freemage, Press Elements – Widgets for Elementor, Giveaways for woocommerce, wGauge – Free Version, ClimateClick: Climate Action for all, BuddyForms EasyPin, DeMomentSomTres Media Tools Auto, BuddyForms, SnazzyAdmin WP Admin Theme, WP Author Bio y Drop Shadow Boxes, de gravedad alta (8,8 sobre 10). Se puede atacar a distancia, con una cuenta cualquiera y sin que la víctima haga nada. Hay versión corregida.

CVSS 3.1

8,8

Alta

Explotación

No confirmada

sin entrada en CISA KEV

EPSS 30 d

—

probabilidad de explotación

Corrección

3.0.2

la más reciente

Publicada

25 feb. 2019

modificada el 22 ene. 2024