Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtrosPaid Memberships Pro < 1.7.15 - Directory Traversal
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 2.8.6 - Reflected Cross-Site Scripting
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 4.25 - Sensitive Data Exposure
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Improper Access Control to Information Disclosure
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure
WP-DBManager < 2.72 - Command Injection
WP DB Manager < 2.7.2 - Arbitrary File Read
Subscribe2 – Form, Email Subscribers & Newsletters <= 10.15 - Stored Cross-Site Scripting
Refraction <= 1.3 - Multiple Vulnerabilities
Easy Forms for Mailchimp 3.0 - 5.0.6 - Cross-Site Scripting
All In One WP Security & Firewall <= 3.8.2 - Authenticated Access or Cross-Site Request Forgery leading to SQL Injection via orderby, order Parameters
MailPoet Newsletters (Previous) <= 2.6.10 - Cross-Site Request Forgery
MailPoet Newsletters <= 2.6.7 - Authorization Bypass
WP-Ban < 1.64 - Improper Input Validation
Authentic <= 2.0.4 - Arbitrary File Download
Ready! Coming Soon <= 0.5.0 Stored Cross-Site Scripting and Cross-Site Request Forgery
Jetpack < 2.9.3 - Security Bypass
KenBurner Slider (All Versions) - Path Traversal
Job Board by BestWebSoft <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting
WordPress Core < 3.9.2 - Authenticated Cross-Site Scripting via Avatar URL
WordPress Core < 3.9.2 - Denial of Service via XML
WHOIS <= 1.4.2.2 - Reflected Cross Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.