Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosSimple-Backup <= 2.7.11 - Unauthenticated Arbitrary File Download
Multiple Plugins <= Multiple Versions - Authenticated Remote Code Execution
Dharma Booking <= 2.28.3 - Unauthenticated Local File Inclusion
Media Library Assistant <= 3.35 - Reflected Cross-Site Scripting
HB Audio Gallery Lite <= 1.0.0 - Unauthenticated Arbitrary File Download
Ultimate Product Catalog <= 4.4.48 - Authenticated (Contributor+) Arbitrary File Upload
JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection
Polls CP <= 1.0.8 - Cross-Site Request Forgery
GetGenie – AI Content Writer with Keyword Research & SEO Tracking <= 4.4.1 - Unauthenticated Information Exposure
GEO my WP <= 4.5.5 - Unauthenticated SQL Injection
Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Unauthenticated Stored Cross-Site Scripting via 'bookly-customer-full-name' Cookie
Meow Gallery <= 5.4.4 - Missing Authorization to Authenticated (Author+) Shortcode creation
Pagelayer <= 2.0.9 - Incorrect Authorization to Authenticated (Contributor+) Mail Relay Configuration via 'contacts'
Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Anchor Block
Canvas <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Block Attribute
Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel <= 3.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_attribute_key' Shortcode Parameter
GPTranslate <= 2.31 - Unauthenticated Stored Cross-Site Scripting via REST API Translation Storage
WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter
WS Optimize – All-in-One Speed Booster & Cache Tools <= 3.3.19 - Authenticated (Editor+) Arbitrary File Read
Hash Elements <= 1.5.4 - Authenticated (Contributor+) Information Exposure
Fediverse Embeds <= 1.5.7 - Unauthenticated Server-Side Request Forgery
WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite. <= 1.0.7 - Unauthenticated Arbitrary File Download
Fediverse Embeds <= 1.5.7 - Unauthenticated Server-Side Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.