Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosYellowPencil Visual CSS Style Editor <= 7.6.1 - Reflected Cross-Site Scripting
WP Armour Extended <= 1.26 - Cross-Site Request Forgery
Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More <= 1.1.2 - Cross-Site Request Forgery
Esotera <= 1.2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPMobile.App <= 11.48 - Reflected Cross-Site Scripting
Magic Post Thumbnail <= 5.2.9 - Reflected Cross-Site Scripting
Envira Photo Gallery <= 1.8.14 - Missing Authorization
Propovoice Pro <= 1.7.0.3 - Unauthenticated SQL Injection
Delicious Recipes – WordPress Recipe Plugin <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
EmbedPress <= 4.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Brickscore <= 1.4.2.5 - Unauthenticated Stored Cross-Site Scripting
Web and WooCommerce Addons for WPBakery Builder <= 1.4.7 - Authenticated (Editor+) Stored Cross-Site Scripting
DSGVO All in one for WP <= 4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
NitroPack <= 1.16.7 - Unauthenticated Arbitrary Shortcode Execution
WP Armour Extended <= 1.26 - Reflected Cross-Site Scripting
Droip < 2.5.2 - Unauthenticated Arbitrary File Deletion
WP Crowdfunding <= 2.1.10 - Missing Authorization to Authenticated (Subscriber+) to Enable/Disable Addons
WP Testimonial Widget <= 3.1 - Authenticated (Admin+) SQL Injection
Testimonials <= 3.0.8 - Reflected Cross-Site Scripting
Simple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object Injection
ImageRecycle pdf & image compression <= 3.1.14 - Missing Authorization in Several AJAX Actions
RT Easy Builder – Advanced addons for Elementor <= 2.3 - Authenticated (Contributor+) Stored Cross-site Scripting
String Locator <= 2.6.5 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.