Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
WishList Member X < 3.26.7 - Missing Authorization to Information Disclosure
affiliate-toolkit <= 3.4.4 - Unauthenticated Sensitive Information Exposure via Logs
MasterStudy LMS <= 3.2.1 - Cross-Site Request Forgery
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Privilege Escalation
Smush – Lazy Load Images, Optimize & Compress Images <= 3.16.4 - Missing Authorization to Resmush List Deletion
Master Slider <= 3.10.0 - Reflected Cross-Site Scripting
WP 2FA <= 2.6.3 - Unauthenticated Information Exposure via Log File
WishList Member X < 3.26.7 - Authenticated (Subscriber+) Remote Code Execution
Secure Copy Content Protection and Content Locking <= 4.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Hide Dashboard Notifications <= 1.3 - Missing Authorization to Authenticated(Contributor+) Plugin Settings Modification
Tabs <= 4.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Consulting Elementor Widgets <= 1.3.0 - Authenticated (Contributor+) Remote Code Execution
Ali2Woo Lite <= 3.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
PropertyHive <= 2.0.9 - Missing Authorization
Woocommerce Customers Order History <= 5.2.2 - Missing Authorization
Consulting Elementor Widgets <= 1.3.0 - Unauthenticated Local File Inclusion
Transition Slider – Responsive Image Slider and Gallery <= 2.20.3 - Authenticated (Editor+) Stored Cross-Site Scripting
License Manager for WooCommerce <= 3.0.6 - Improper Authorization to Authenticated(Contributor+) Sensitive Information Exposure
Ali2Woo Lite <= 3.3.6 - Reflected Cross-Site Scripting
BlossomThemes Email Newsletter <= 2.2.6 - Authenticated (Admin+) Server-Side Request Forgery
WishList Member X < 3.26.7 - Missing Authorization to Stored Cross-Site Scripting
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.6 - Authenticated (Contributor+) Local File Inclusion
Enfold <= 5.6.9 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.