Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosOpen Graph Metabox <= 1.4.4 - Cross-Site Request Forgery
GeoDirectory <= 2.3.28 - Authenticated (Administrator+) SQL Injection via orderby
iPanorama 360 – WordPress Virtual Tour Builder <= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcode
Google Calendar Events <= 3.2.5 - Cross-Site Request Forgery via bulk_actions
Smart App Banner <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Appointment Calendar <= 2.9.6 - Cross-Site Request Forgery
Envo Extra <= 1.8.3 - Cross-Site Request Forgery
Freesoul Deactivate Plugins <= 2.1.3 - Cross-Site Request Forgery via eos_dp_pro_delete_transient
Themify Ultra <= 7.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
E2Pdf <= 1.20.18 - Authenticated (Administrator+) PHP Object Injection
Webmaster Tools <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Themify Ultra <= 7.3.5 - Privilege Escalation
MpOperationLogs <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
WP Full Stripe Free <= 7.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
User Feedback <= 1.0.9 - Unauthenticated Cross-Site Scripting
Spider Facebook <= 1.0.15 - Reflected Cross-Site Scripting
Themify Ultra <= 7.3.5 - Missing Authorization
Skype Legacy Buttons <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Stripe Gateway <= 7.6.0 - Cross-Site Request Forgery
WOLF <= 1.0.7.1 - Cross-Site Request Forgery
WP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Cross-Site Request Forgery
Conversios.io <= 6.5.3 - Reflected Cross-Site Scripting
Category SEO Meta Tags <= 2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.