Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.498
Restablecer filtrosPlank <= 1.7 - Unauthenticated Local File Inclusion
Splendour <= 1.23 - Unauthenticated Local File Inclusion
Struktur <= 2.5.1 - Unauthenticated Local File Inclusion
FreightCo <= 1.1.7 - Unauthenticated Local File Inclusion
Belletrist <= 1.2 - Unauthenticated Local File Inclusion
HealthFirst <= 1.0.1 - Unauthenticated Local File Inclusion
Tint <= 1.7 - Unauthenticated Local File Inclusion
Lucky Wheel Giveaway <= 1.0.22 - Authenticated (Administrator+) Remote Code Execution via 'conditional_tags' Parameter
Custom Block Builder – Lazy Blocks <= 4.2.0 - Authenticated (Contributor+) Remote Code Execution
Boutique <= 2.3.3 - Authenticated (Contributor+) Local File Inclusion
WooCommerce Coming Soon Product with Countdown <= 5.0 - Authenticated (Subscriber+) Local File Inclusion
Simple Retail Menus <= 4.2.1 - Unauthenticated Local File Inclusion
Upload Files Anywhere <= 2.8 - Unauthenticated Arbitrary File Deletion
PatioTime < 2.1 - Unauthenticated Local File Inclusion
Simple File List <= 6.1.15 - Authenticated (Subscriber+) Arbitrary File Download
Upload Files Anywhere <= 2.8 - Unauthenticated Arbitrary File Download
shop <= 2.6.1 - Unauthenticated Local File Inclusion
Fluent Forms Pro Add On Pack <= 6.1.12 - Authenticated (Subscriber+) Server-Side Request Forgery via 'saveDataSource'
KuteShop <= 4.2.9 - Authenticated (Contributor+) Local File Inclusion
Subitem AL Slider <= 1.0.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
WP Duplicate <= 1.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via 'process_add_site' AJAX Action
User Extra Fields <= 17.0 - Unauthenticated Arbitrary File Deletion
Golo < 1.7.5 - Authenticated (Contributor+) Local File Inclusion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.