Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosSideblog WordPress Plugin <= 6.0 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting
WP Admin Style <= 0.1.2 - Authenticated Stored Cross-Site Scripting
Keep Backup Daily <= 2.0.2 - Reflected Cross-Site Scripting
New User Email Set Up <= 0.5.2 - Cross-Site Request Forgery to Settings Update
One Click Plugin Updater <= 2.4.14 - Cross-Site Request Forgery to Settings Update
Sticky Popup <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Appointment Hour Booking <= 1.3.55 - Authenticated Stored Cross-Site Scripting
RB Internal Links <= 2.0.16 - Cross-Site Request Forgery to Settings update and Cross-Site Scripting
WP-chgFontSize <= 1.8 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting
Zephyr Project Manager <= 3.2.40 - Reflected Cross-Site Scripting
Genki Pre-Publish Reminder <= 1.4.1 - Cross-Site Request Forgery to Cross-Site Scripting
Filr – Secure document library <= 1.2.2 - Missing Authorization
Export any WordPress data to XML/CSV <= 1.3.4 - Authenticated SQL Injection
CRM WordPress Plugin – RepairBuddy <= 3.72 - SQL Injection
Google Tag Manager for WordPress <= 1.15 - Reflected Cross-Site Scripting via Site Search
Code Snippets <= 2.14.3 - Reflected Cross-Site Scripting
Log WP_Mail <= 0.1 - Sensitive Information Disclosure
Second Street <= 3.1.6 - Stored Cross-Site Scripting via organization_id
Event Management, Events Calendar, RSVP Event Tickets Plugin <= 3.8.4 - Cross-Site Scripting
Email Users <= 4.8.8 - Arbitrary Settings Update via Cross-Site Request Forgery
Carousel CK <= 1.1.0 - Authenticated (Admin+) Cross-Site Scripting
Quick Subscribe <= 1.7.1 - Cross-Site Request Forgery to Arbitrary Settings Update and Stored Cross-Site Scripting
Slideshow CK <= 1.4.9 - Authenticated Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.