Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosRecently viewed and most viewed products <= 1.1.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Redirect 404 Error Page to Homepage or Custom Page with Logs <= 1.8.7 - Authenticated (Administrator+) SQL Injection
Solid Central <= 3.0.0 - Stored Cross-Site Scripting via packages
Who Hit The Page – Hit Counter <= 1.4.14.3 - Authenticated (Administrator+) SQL Injection
BadgeOS <= 3.7.1.6 - Missing Authorization
Direct Checkout – Quick View – Buy Now For WooCommerce <= 1.5.8 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Custom CSS Code
Atarim <= 3.12 - Unauthenticated Cross-Site Scripting
Actueel Financieel Nieuws – Denk Internet Solutions <= 5.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Ovic Responsive WPBakery <= 1.2.8 - Authenticated (Subscriber+) Arbitrary Option Update
Patreon WordPress <= 1.8.7 - Cross-Site Request Forgery
WP Edit Username <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Restrict Categories <= 2.6.4 - Reflected Cross-Site Scripting via rc-search
WooCommerce Product Table Lite <= 2.6.2 - Cross-Site Request Forgery
BZScore – Live Score <= 1.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Amazonify <= 0.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Extra Product Options for WooCommerce <= 4.1 - Authenticated (Shop manager+) Stored Cross-Site Scripting via plugin settings
EazyDocs <= 2.3.5 - Unauthenticated Stored Cross-Site Scripting via edit_doc_one_page
ANAC XML Bandi di Gara <= 7.5 - Cross-Site Request Forgery via settings.php
Under Construction / Maintenance Mode from Acurax <= 2.6 - Unauthenticated Cross-Site Scripting
Edit WooCommerce Templates <= 1.1.1 - Unauthenticated Cross-Site Scripting
Amazonify <= 0.8.1 - Cross-Site Request Forgery to Amazon Tracking ID Update
SendPress Newsletters <= 1.23.11.6 - Reflected Cross-Site Scripting
Add Local Avatar <= 12.1 - Cross-Site Request Forgery via manage_avatar_cache
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.