Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros012 PS Multi Languages <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Timeline – Vertical and Horizontal timeline plugin <= 3.6.7 - Authenticated (Contributor+) Local File Inclusion
WP Timeline – Vertical and Horizontal timeline plugin <= 3.6.7 - Unauthenticated Local File Inclusion
WordPress Visitors <= 1.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Header
Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.34 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Sight – Professional Image Gallery and Portfolio <= 1.1.2 - Missing Authorization to Sensitive Information Exposure in handler_post_title
Multiple Page Generator Plugin – MPG <= 3.4.7 - Authenticated (Contributor+) SQL Injection
Wheel of Life <= 1.1.8 - Missing Authorization
Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload
Catch Base <= 3.4.6 - Authenticated (Author+) Stored Cross-Site Scripting
Fluent Support <= 1.8.0 - Authenticated (Subscriber+) SQL Injection
Use Any Font <= 6.3.08 - Cross-Site Request Forgery
Cities Shipping Zones for WooCommerce <= 1.2.7 - Authenticated (Shop Manager+) Local File Inclusion
Bit Form – Contact Form Plugin <= 2.13.10 - Authenticated (Administrator+) Arbitrary File Upload
ARI Fancy Lightbox <= 1.3.17 - Authenticated (Author+) Stored Cross-Site Scripting
Sunshine Photo Cart <= 3.2.8 - Missing Authorization
ElementsReady Addons for Elementor <= 6.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Automation By Autonami <= 3.1.2 - Authenticated (Administrator+) SQL Injection
Secure Copy Content Protection and Content Locking <= 4.2.3 - Reflected Cross-Site Scripting
Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload
GiveWP <= 3.15.1 - Cross-Site Request Forgery
GEO my WordPress <= 4.5.0.3 - Reflected Cross-Site Scripting
PWA for WP & AMP <= 1.7.72 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.