Crítica
CVE-2015-4133
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Crítica
CVE-2015-10138
Work The Flow File Upload <= 2.5.2 - Arbitrary File Upload
Media
CVE-2015-2324
Photo Gallery by 10Web <= 1.2.12 - Authenticated Cross-Site Scripting
Media
b5635423-d17a-4f04-a164-64bf141b6bb4
IP Blacklist Cloud < 3.43 - Directory Traversal
Alta
CVE-2015-2329
WooCommerce <= 2.3.5 - Stored Cross-Site Scripting
Alta
CVE-2015-2062
Responsive Slider – Image Slider – Slideshow for WordPress < 2.7.0 - Authenticated (Admin+) SQL Injection
Crítica
CVE-2015-9330
Import any XML or CSV File to WordPress < 3.2.5 - SQL Injection
Media
22a0f10f-0a67-4f4a-99db-a625bec20bdc
Image Gallery - Responsive Photo Gallery <= 1.7.0 - Reflected Cross-Site Scripting via thumbtext
Media
0793a054-b213-4519-bc30-ce835979248b
Custom Field Suite <= 2.4 - Missing Authorization
Alta
e597b677-e298-4507-86a5-70a93a9afd6e
SpiderCalendar <= 1.4.13 - Cross-Site Request Forgery
Alta
CVE-2015-2292
Yoast SEO <= 1.7.3.3 - Blind SQL Injection
Media
CVE-2015-2315
WPML < 3.1.9 - Cross-Site Scripting
Crítica
CVE-2015-9301
WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms < 3.2.0 - SQL Injection
Alta
CVE-2015-2293
Yoast SEO <= 1.7.3.3 - Cross-Site Request Forgery
Alta
CVE-2015-2791
WPML <= 3.1.9 - Arbitrary Deletion of Content
Crítica
570f680b-b688-49ad-9eed-0bc966a4cdf7
Faction <= 1.1.1 - Arbitrary Options Update
Media
24c3d004-da8b-40ec-b52e-6923d4c824e8
Daily Edition <= 1.6.2 - Cross-Site Scripting
Crítica
0ae243af-619f-4405-b1e0-9b44c1869501
Ultimate Member < 1.0.84 - Authorization Bypass to Arbitrary File Upload/Delete
Crítica
CVE-2015-2314
WPML <= 3.1.9 - SQL Injection via lang Parameter
Alta
ac45d8fe-4b79-4b2c-998e-e51da7a37e40
Custom Community 2.0 - 2.0.24 - Stored Cross-Site Scripting
Crítica
84019c69-32fd-4331-95d7-53ea1aaff616
MainWP Child – Securely connects sites to the MainWP WordPress Manager Dashboard < 2.0.9.2 - Authentication Bypass
Alta
518771c1-b52b-47b7-99f1-4f40115ba4cf
Pie Register < 2.0.15 - Cross-Site Scripting
Crítica
CVE-2015-10135
WPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload
Media
f71ab7bb-886a-4661-92b5-d9ac52901494
Download Monitor <= 1.6.3 - Directory Listing to Information Disclosure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.