Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.440
WooCommerce License Manager <= 5.3.1 - Reflected Cross-Site Scripting
Download Manager <= 3.2.84 - Authenticated (Contributor+) Stored Cross-Site Scripting
Smart Online Order for Clover <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
WooCommerce Google Feed Manager <= 2.2.0 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Link Library <= 7.6 - Reflected Cross-Site Scripting
Contact Form 7 – PayPal & Stripe Add-on <= 2.0 - Reflected Cross-Site Scripting
RegistrationMagic <= 5.2.5.9 - Reflected Cross-Site Scripting
OxyExtras <= 1.4.4 - Unauthenticated Cross-Site Scripting
Contact Forms by Cimatti <= 1.7.0 - Unauthenticated Stored Cross-Site Scripting
Sitekit <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Specific Content For Mobile – Customize the mobile version without redirections <= 0.1.9.5 - Reflected Cross-Site Scripting
Table & Contact Form 7 Database – Tablesome <= 1.0.27 - Reflected Cross-Site Scripting
WooThumbs for WooCommerce by Iconic <= 5.5.3 - Reflected Cross-Site Scripting
FV Flowplayer Video Player <= 7.5.41.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting
Inline Related Posts <= 3.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Coupon Affiliates <= 5.12.7 - Reflected Cross-Site Scripting
Scrollsequence <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Regular expression denial-of-service in Django
TurboBoost Commands vulnerable to arbitrary method invocation
CoreWCF NetFraming based services can leave connections open when they should be closed
fgr Vulnerable to Insecure Default Variable Initialization
RaspAP Vulnerable to Code Injection via an Unknown Process in File `includes/provider.php`
SSRF vulnerability using the Aegis DataBinding in Apache CXF
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.