Sicherheitslücken

Von uns entdeckte und gemeldete Sicherheitslücken, gruppiert nach Ökosystem.

Weitere 47 Sicherheitslücken wurden nicht an die Hersteller gemeldet und werden hier nicht aufgelistet.

Node.js

• CVE-2019-10773 (yarn)
• CVE-2019-16775 (npm)
• CVE-2019-16776 (npm)
• CVE-2019-16777 (npm)

WordPress

• CVE-2022-0541 (flo-launch) (txt)
• CVE-2022-1570 (files-download-delay) (txt)
• CVE-2022-1572 (html2wp) (txt)
• CVE-2022-1573 (html2wp) (txt)
• CVE-2022-1574 (html2wp) (txt)
• CVE-2022-1576 (wp-maintenance-mode) (txt)
• CVE-2022-1577 (wp-db-backup) (txt)
• CVE-2022-1578 (my-wpdb) (txt)
• CVE-2022-1579 (login-block-ips) (txt)
• CVE-2022-1580 (site-offline) (txt)
• CVE-2022-1581 (wp-polls) (txt)
• CVE-2022-1583 (open-external-links-in-a-new-window) (txt)
• CVE-2022-1585 (project-source-code-download) (txt)
• CVE-2022-1589 (change-wp-admin-login) (txt)
• CVE-2022-1591 (wordpress-ping-optimizer) (txt)
• CVE-2022-1593 (site-is-offline-plugin) (txt)
• CVE-2022-1594 (hc-custom-wp-admin-url) (txt)
• CVE-2022-1595 (hc-custom-wp-admin-url) (txt)
• CVE-2022-1599 (admin-management-xtended) (txt)
• CVE-2022-1600 (yop-poll) (txt)
• CVE-2022-1601 (user-access-manager) (txt)
• CVE-2022-1603 (mail-subscribe-list) (txt)
• CVE-2022-1605 (email-users) (txt)
• CVE-2022-1608 (social-locker) (txt)
• CVE-2022-1610 (seamless-donations) (txt)
• CVE-2022-1611 (bulk-page-creator) (txt)
• CVE-2022-1612 (webriti-smtp-mail) (txt)
• CVE-2022-1613 (restricted-site-access) (txt)
• CVE-2022-1614 (wp-email) (txt)
• CVE-2022-1624 (latest-tweets-widget) (txt)
• CVE-2022-1625 (new-user-approve) (txt)
• CVE-2022-1626 (sharebar) (txt)
• CVE-2022-1627 (jonradio-private-site) (txt)
• CVE-2022-1630 (wp-email) (txt)
• CVE-2022-1653 (social-share-buttons-by-supsystic) (txt)
• CVE-2022-1663 (stop-spam-comments) (txt)
• CVE-2022-1672 (google-pagespeed-insights) (txt)
• CVE-2022-1694 (useful-banner-manager) (txt)
• CVE-2022-1695 (wordpress-plugin-for-simple-google-adsense-insertion) (txt)
• CVE-2022-1709 (throws-spam-away) (txt)
• CVE-2022-1712 (livesync) (txt)
• CVE-2022-1732 (rename-wp-login) (txt)
• CVE-2022-1757 (pagebar) (txt)
• CVE-2022-1758 (genki-pre-publish-reminder) (txt)
• CVE-2022-1759 (rb-internal-links) (txt)
• CVE-2022-1760 (core-control) (txt)
• CVE-2022-1761 (peters-collaboration-e-mails) (txt)
• CVE-2022-1762 (iq-block-country) (txt)
• CVE-2022-1763 (jp-staticpagex) (txt)
• CVE-2022-1764 (wp-chgfontsize) (txt)
• CVE-2022-1765 (hot-linked-image-cacher) (txt)
• CVE-2022-1779 (auto-delete-posts) (txt)
• CVE-2022-1780 (latex) (txt)
• CVE-2022-1781 (posttabs) (txt)
• CVE-2022-1787 (sideblog) (txt)
• CVE-2022-1788 (change-uploaded-file-permissions) (txt)
• CVE-2022-1790 (new-user-email-set-up) (txt)
• CVE-2022-1791 (one-click-plugin-updater) (txt)
• CVE-2022-1792 (quick-subscribe) (txt)
• CVE-2022-1793 (private-files) (txt)
• CVE-2022-1818 (multi-page-toolkit) (txt)
• CVE-2022-1826 (cross-linker) (txt)
• CVE-2022-1827 (pdf24-post-to-pdf) (txt)
• CVE-2022-1828 (pdf24-posts-to-pdf) (txt)
• CVE-2022-1829 (google-maps-advanced) (txt)
• CVE-2022-1830 (amazon-einzeltitellinks) (txt)
• CVE-2022-1831 (wplite) (txt)
• CVE-2022-1832 (capa) (txt)
• CVE-2022-1842 (openbook-book-data) (txt)
• CVE-2022-1843 (mailpress) (txt)
• CVE-2022-1844 (wp-sentry) (txt)
• CVE-2022-1845 (wp-post-styling) (txt)
• CVE-2022-1846 (tiny-contact-form) (txt)
• CVE-2022-1847 (rotating-posts) (txt)
• CVE-2022-1885 (cimy-header-image-rotator) (txt)
• CVE-2022-1895 (underconstruction) (txt)
• CVE-2022-1913 (wp-posturl) (txt)
• CVE-2022-1914 (clean-contact) (txt)
• CVE-2022-1956 (shortcut-macros) (txt)
• CVE-2022-1957 (comment-license) (txt)
• CVE-2022-1960 (mycss) (txt)
• CVE-2022-1967 (wp-championship) (txt)
• CVE-2022-2091 (cache-images) (txt)
• CVE-2022-2123 (wp-opt-in) (txt)
• CVE-2022-2171 (progressive-license) (txt)
• CVE-2022-2172 (linkworth-wp-plugin) (txt)
• CVE-2022-2328 (flexi-quote-rotator) (txt)
• CVE-2022-2544 (ninja-job-board) (txt)
• CVE-2022-2558 (simple-job-board) (txt)
• CVE-2022-2600 (auto-hyperlink-urls) (txt)
• CVE-2022-2877 (anti-spam) (txt)
• CVE-2022-2913 (login-recaptcha) (txt)
• CVE-2022-3096 (wp-total-hacks) (txt)
• CVE-2022-3097 (lbstopattack) (txt)
• CVE-2022-3098 (login-block-ips) (txt)
• CVE-2022-3489 (wp-hide) (txt)
• CVE-2022-3538 (webmaster-tools-verification) (txt)
• CVE-2022-4097 (all-in-one-wp-security-and-firewall) (txt)
• CVE-2022-4303 (wp-limit-login-attempts) (txt)
• CVE-2022-4346 (all-in-one-wp-security-and-firewall) (txt)
• CVE-2022-4746 (fluent-security) (txt)
• CVE-2022-4794 (aawp) (txt)
• CVE-2023-0816 (formidable) (txt)
• CVE-2023-6389 (wordpress-toolbar) (txt)
• CVE-2023-6390 (wordpress-users) (txt)
• CVE-2023-6391 (custom-user-css) (txt)
• CVE-2023-6499 (lastunes) (txt)
• CVE-2023-6501 (splashscreen) (txt)
• CVE-2023-6503 (wp-plugin-lister) (txt)
• CVE-2023-6532 (wp-blogs-planetarium) (txt)
• CVE-2023-6845 (commenttweets) (txt)
• CVE-2023-6946 (autotitle-for-wordpress) (txt)
• CVE-2023-7074 (wp-social-bookmark-menu) (txt)
• CVE-2023-7083 (voting-record) (txt)
• CVE-2023-7084 (voting-record) (txt)
• CVE-2023-7174 (abitgone-commentsafe) (txt)
• CVE-2023-7195 (wp-reply-notify) (txt)
• CVE-2023-7196 (ultimate-noindex-nofollow-tool) (txt)
• CVE-2023-7197 (wordpress-twitterbot) (txt)