Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtrosMStore API <= 3.9.7 - Unauthenticated SQL Injection
All In One Redirection <= 2.1.0 - Authenticated(Administrator+) SQL Injection
WooCommerce Product Vendors <= 2.1.78 - Authenticated (Shop manager+) SQL Injection
Contact Form Maker <= 1.13.23 - Authenticated (Administrator+) SQL Injection
YaySMTP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting via Email
WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby'
Ultimate Addons for Contact Form 7 <= 3.1.23 - Authenticated(Subscriber+) SQL Injection
WP Brutal AI < 2.0.0 - Cross-Site Request Forgery to SQL Injection
FormCraft Premium <= 3.9.6 - Authenticated(Administrator+) SQL Injection
Responsive CSS EDITOR <= 1.0 - Authenticated(Administrator+) SQL Injection
KiviCare – Clinic & Patient Management System (EHR) <= 3.2.0 - Sensitive Information Exposure
WP ERP <= 1.12.3 - Authenticated (Administrator+) SQL Injection via 'type'
Web Directory Free <= 1.6.8 - Authenticated (Contributor+) SQL Injection via post_id
Groundhogg <= 2.7.11 - Authenticated (Administrator+) SQL Injection
Tutor LMS <= 2.1.10 - Unauthenticated SQL Injection
WP Report Post <= 2.1.2 - Authenticated (Editor+) SQL Injection
Tutor LMS <= 2.1.10 - Authenticated (Tutor Instructor+) SQL Injection
Tutor LMS <= 2.2.0 - Authenticated (Student+) SQL Injection
Portfolio Gallery – Photo Gallery <= 1.1.8 - Authenticated (Admin+) SQL Injection
QueryWall <= 1.1.1 - Authenticated (Administrator+) SQL Injection
User Activity Log <= 1.6.2 - Authenticated(Administrator+) SQL Injection via txtsearch
WooCommerce Product Vendors <= 2.1.76 - Authenticated (Vendor admin+) SQL Injection
WooCommerce Follow-Up Emails <= 4.9.50 - Authenticated (Follow-up emails manager+) SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.