Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtrosPDF Invoices & Packing Slips for WooCommerce <= 3.7.6 - Authenticated (Shop Manager+) SQL Injection
Paid Memberships Pro <= 2.12.6 - Information Exposure in Debug Logs
WP Testimonials <= 1.4.3 - Authenticated (Contributor+) SQL Injection
Profile Builder Pro <= 3.10.0 - Authenticated (Subscriber+) Time-Based One-Time Password Sensitive Information Exposure
Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated SQL Injection via userToken
Seraphinite Accelerator <= 2.20.47 - Unauthenticated Sensitive Information Exposure via Log File
Download Monitor <= 4.9.4 - Authenticated (Admin+) SQL Injection
WP ERP <= 1.12.8 - Authenticated (Accounting manager+) SQL Injection
pTypeConverter <= 0.2.8.1 - Authenticated (Editor+) SQL Injection
WooCommerce Conversion Tracking <= 2.0.11 - Missing Authorization
Randomize <= 1.4.3 - Authenticated (Contributor+) SQL Injection
Coupon Referral Program <= 1.8.4 - Sensitive Information Disclosure
WP-Members Membership Plugin <= 3.4.8 - Missing Authorization to Sensitive Information Exposure
Constant Contact Forms <= 2.4.2 - Information Disclosure via Log Files
WP SMS <= 6.5 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting
LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by
Image Source Control <= 2.17.0 - Sensitive Information Exposure via Log File
Everest Backup <= 2.1.9 - Sensitive Information Exposure via Log File
Recipe Maker For Your Food Blog from Zip Recipes <= 8.1.0 - Authenticated(Contributor+) SQL Injection
Most And Least Read Posts Widget <=2.5.16 - Authenticated(Contributor+) SQL Injection via Widget settings
Events Shortcodes & Templates For The Events Calendar <= 2.3.1 - Authenticated (Contributor+) SQL Injection via shortcode
Affiliates Manager <= 2.9.30 - Sensitive Information Exposure via Log File
WS Form LITE <= 1.9.170 - Authenticated(Administrator+) SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.