Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtrosOnline Scheduling and Appointment Booking System <= 27.7 - Unauthenticated SQL Injection
Premium Packages <= 6.2.0 - Unauthenticated SQL Injection
WP Fast Total Search <= 1.80.280 - Unauthenticated SQL Injection
SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'checkout_payment_plans' and 'order_status' Settings
ShopLentor <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Chaty Pro <= 3.5.5 - Authenticated (Subscriber+) SQL Injection via 'widget_id' Parameter
SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'id' Parameter
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.4 - Authenticated (Authenticated+) SQL Injection
ЮKassa для WooCommerce <= 2.16.1 - Authenticated (Subscriber+) Information Exposure
Google Review Slider <= 18.4 - Authenticated (Administrator+) SQL Injection
Exclusive Addons Elementor <= 2.8.0 - Unauthenticated Information Exposure
LogMyTrip <= 1.9 - Unauthenticated SQL Injection
MapPress – Google Maps, OpenStreetMap & Leaflet <= 2.97.6 - Unauthenticated Information Exposure
Super Store Finder <= 7.10 - Unauthenticated SQL Injection
SM Page Duplicator <= 1.0.0 - Authenticated (Editor+) SQL Injection
AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking <= 2.3.5 - Unauthenticated Server-Side Request Forgery
Ninja Forms <= 3.14.9 - Authenticated (Administrator+) SQL Injection via Import File 'settings' Key
Byteflows Travel & Hotel Booking <= 1.0.0 - Unauthenticated Information Exposure
Relevanssi Light <= 1.2.2 - Unauthenticated SQL Injection
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 - Authenticated (Administrator+) SQL Injection
Gallery for Google Photos <= 1.2.0 - Unauthenticated Google OAuth Token Disclosure
ShipTime: Discount Shipping <= 1.1.1 - Authenticated (Subscriber+) Information Exposure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.