Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
Events Made Easy <= 2.2.35 - Subscriber+ SQL Injection
Multivendor Marketplace Solution for WooCommerce – WC Marketplace < 3.8.4 - Reflected Cross-Site Scripting
Booking Calendar <= 8.9.1 - Reflected Cross-Site Scripting
WooCommerce PDF Invoices & Packing Slips <= 2.10.4 - Reflected Cross-Site Scripting via tab and section parameter
Site Reviews <= 5.17.2 - Unauthenticated Stored Cross-Site Scripting
WPcalc – Create any online calculators <= 2.1 - SQL Injection
Stars Rating <= 3.5.0 - Denial of Service
PowerPack Addons for Elementor <= 2.6.1 - Reflected Cross-Site Scripting
UpdraftPlus WordPress Backup Plugin <= 1.16.65 - Reflected Cross-Site Scripting
Share-one-Drive <= 1.15.2 - Reflected Cross-Site Scripting
Use-Your-Drive < 1.18.3 - Reflected Cross-Site Scripting
Floating Chat Widget: Contact Icons, Messages, Telegram, Email, SMS, Call Button - Chaty <= 2.8.2 Reflected Cross-Site Scripting
Button Generator – easily Button Builder <= 2.3.2 - Cross-Site Request Forgery
Modal Window – create popup modal window <= 5.2.1 - Cross-Site Request Forgery to Remote Code Execution
WP Coder <= 2.5.1 - Remote File Inclusion leading to Remote Code Execution via Cross-Site Request Forgery
Path manipulation in matyhtf/framework
Cross-site Scripting in LibreNMS
Cross-site Scripting in LibreNMS
elgg is vulnerable to Authorization Bypass Through User-Controlled Key
Cross-site Scripting in kimai2
kimai2 is vulnerable to Improper Access Control
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to URL Redirection to Untrusted Site
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.