Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.822
Restablecer filtrosKlarna Checkout for WooCommerce <= 2.0.9 - Arbitrary Plugin Installation, Activation and Deactivation
WooCommerce Subscriptions <= 3.0.2 - Cross-Site Request Forgery
Product Import Export for WooCommerce <= 1.7.4 - Missing Authorization to CSV Import
WooCommerce Smart Coupons <= 4.6.0 - Unauthenticated Coupon Creation
Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update
CardGate Payments for WooCommerce <= 3.1.15 - Lack of Origin Validation
WooCommerce < 4.7.0 - Insecure Direct Object Reference via order_id Parameter
WooCommerce - Store Exporter <= 2.3.1 - CSV Injection
WooCommerce Conversion Tracking <= 2.0.4 - Cross-Site Request Forgery and Cross-Site Scripting
Funnel Builder <= 1.3.0 - Arbitrary Plugin Activation
Currency Switcher <= 2.11.1 - Authorization Bypass
YIT Plugin Framework <= 3.3.8 - Authenticated Settings Change
Email Templates <= 1.3 - HTML Injection
WooCommerce AJAX Product Filters <= 1.3.6 - Arbitrary Settings Update
ECPay Logistics for WooCommerce <= 1.2.181030 - Reflected Cross-Site Scripting
Spryng Payments for WooCommerce <= 1.6.7 - Cross-Site Scripting
WooCommerce Product Feed for Google, Facebook, eBay and Many More <= 3.1.14 - Reflected Cross-Site Scripting
WooCommerce PayU India <= 2.1.1 - Improper Input Validation
WooCommerce Address Book < 1.6.0 - Cross-Site Request Forgery
Variation Swatches for WooCommerce <= 1.0.61 - Reflected Cross-Site Scripting
Additional Variation Images Gallery for WooCommerce <= 1.1.28 - Authenticated Stored Cross-Site Scripting
JVM WooCommerce Wishlist <= 1.2.6 - Insecure Direct Object Reference
PPOM for WooCommerce <= 18.3 - Authenticated Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.