Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosSlider Revolution <= 6.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
avalex – Automatisch sichere Rechtstexte <= 3.0.8 - Missing Authorization
Betheme <= 27.1.1 - Missing Authorization
Permalinks Customizer <= 2.8.2 - Reflected Cross-Site Scripting
Post Status Notifier Lite <= 1.11.0 - Reflected Cross-Site Scripting
Footer Putter <= 6.1.3 - Reflected Cross-Site Scripting
Integration for Contact Form 7 and Constant Contact <= 1.1.4 - Open Redirect
Events Addon for Elementor <= 2.1.2 - Cross-Site Request Forgery
LuckyWP Scripts Control <= 1.2.1 - Missing Authorization
Thrive Theme Builder < 3.24.0 - Missing Authorization
WP Courses LMS <= 3.2.3 - Cross-Site Request Forgery
LayerSlider <= 7.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Thrive Theme Builder < 3.24.0 - Privilege Escalation
eCommerce Product Catalog for WordPress <= 3.3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Thrive Theme Builder < 3.24.2 - Cross-Site Request Forgery
Essential Grid <= 3.0.18 - Missing Authorization
Forminator <= 1.27.0 - Authenticated (Administrator+) Arbitrary File Upload
WP Courses LMS <= 3.2.3 - Missing Authorization
Interactive World Map <= 3.2.0 - Reflected Cross-Site Scripting
Restaurant & Cafe Addon for Elementor <= 1.5.2 - Missing Authorization
Delete Duplicate Posts <= 4.8.9 - Missing Authorization via AJAX Actions
Uploading SVG, WEBP and ICO files <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Filr – Secure document library <= 1.2.3.5 - Authenticated (Author+) Arbitrary File Upload
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.