Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosAuto Login New User After Registration <= 1.9.6 - Cross-Site Request Forgery to Settings Modification
Ultimate Addons for WPBakery Page Builder <= 3.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Just Custom Fields <= 3.3.2 - Cross-Site Request Forgery on AJAX Actions
Grid Plus <= 1.3.4 - Reflected Cross-Site Scripting via grid_id
MW WP Form <= 4.4.5 - Missing Authorization
Ultimate Addons for WPBakery Page Builder <= 3.19.14 - Authenticated(Contributor+) Local File Inclusion
Motors – Car Dealer & Classified Ads <= 1.4.6 - Server Side Request Forgery
WC Captcha <= 1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Eonet Manual User Approve <= 2.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Delete Usermetas <= 1.1.2 - Cross-Site Request Forgery
Motors – Car Dealer & Classified Ads <= 1.4.6 - Reflected Cross-Site Scripting
Auto Login New User After Registration <= 1.9.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via alnuar_auto_login_new_user_after_registration_redirect
Novo-Map : your WP posts on custom google maps <= 1.1.2 - Cross-Site Request Forgery
Popup by Supsystic <= 1.10.19 - Missing Authorization to Sensitive Information Exposure
Booster for WooCommerce <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Social proof testimonials and reviews by Repuso <= 4.97 - Missing Authorization
Archivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scripting
Internal Link Building <= 1.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Team Showcase <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Headline Analyzer <= 1.3.1 - Missing Authorization via REST APIs
BetterLinks <= 1.6.0 - Improper Authorization to Data Import and Export
Internal Link Building <= 1.2.3 - Cross-Site Request Forgery
WhatsApp Share Button <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.