Media
45e61d76-085d-48ba-b5ae-cc75f91d1250
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtros
Alta
CVE-2019-15647
WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg < 1.3.5 - Remote Code Execution
Alta
CVE-2019-10673
Ultimate Member <= 2.0.39 - Cross-Site Request Forgery
Crítica
05c40628-b8fc-48ff-8819-c0955d69fce0
Pipdig Power Pack (P3) <= 4.7.3 - Backdoor
Crítica
CVE-2019-25141
Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update
Crítica
CVE-2019-25217
SiteGround Optimizer <= 5.0.12 - Missing Authorization
Media
CVE-2019-18834
WooCommerce Subscriptions < 2.6.3 - Stored Cross-Site Scripting
Alta
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Media
CVE-2019-8943
WordPress Core <= 5.0.3 - Path Traversal and Local File Inclusion
Alta
CVE-2019-8942
WordPress Core < 5.0.1 - Remote Code Execution
Media
CVE-2019-7411
Launcher: Coming Soon & Maintenance Mode < 1.0.11 - Stored Cross-Site Scripting
Media
5eab8a5d-8eb8-495f-a953-b468360cc5d5
Advanced Custom Fields <= 5.7.11 - PHP Object Injection
Media
CVE-2019-9909
GiveWP <= 2.3.0 - Cross-Site Scripting
Media
CVE-2019-9646
Contact Form Email <= 1.2.65 - Reflected Cross-Site Scripting
Alta
a67eb1fc-4762-4bdc-b0a0-c043c36659d0
NextGen Gallery <= 3.1.5 - PHP Object Injection
Crítica
bbd1e68f-1f84-40d6-9ecd-34280c3c5099
Yet Another Stars Rating <= 1.8.6 - Unauthenticated PHP Object Injection
Media
95ad0139-eb12-4c02-95fb-cd19b6a6ab02
Health Check & Troubleshooting <= 1.2.3 - Path Traversal
Crítica
CVE-2019-15322
Shortcode Factory <= 2.7 - Local File Inclusion
Media
761a4801-fc4a-40a0-b5aa-303d88a87062
User Registration <= 1.5.5 - Cross-Site Scripting
Media
CVE-2019-1000003
MapSVG Lite < 3.3.0 - Cross-Site Request Forgery
Alta
b96f40fe-3ffa-4fc5-b51a-ff3771224bd5
WP Job Manager <= 1.31.2 - PHP Object Injection via PHAR Deserialization
Crítica
CVE-2019-15025
Ninja Forms Contact Form <= 3.3.21.1 - SQL Injection
Crítica
CVE-2018-20156
WP Maintenance Mode <= 2.0.6 - Remote Code Execution
Media
CVE-2018-20150
WordPress Core < 5.0.1 Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.