Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
WPFront Scroll Top <= 2.0.5 - Authenticated Stored Cross-Site Scripting
WP SMS <= 5.4.12 - Authenticated Stored Cross-Site Scripting
Listing, Classified Ads & Business Directory – uListing <= 2.0.3 - Unauthenticated SQL Injection
Simple Social Media Share Buttons <= 3.2.2 - Contributor+ Stored Cross-Site Scripting
Slider Hero with Animation, Video Background & Intro Maker <= 8.2.6 - SQL Injection
Post Index <= 0.7.5 Cross-Site Request Forgery to Stored Cross-Site Scripting
GiveWP <= 2.11.3 - Authenticated Stored Cross-Site Scripting
Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change
Contact Form 7 Captcha <= 0.0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Poll Maker <= 3.2.8 – Reflected Cross-Site Scripting
HD Quiz <= 1.8.3 - Stored Cross-Site Scripting
Simple Events Calendar <= 1.4.0 - Authenticated SQL Injection
Edit Comments <= 0.3 - Unauthenticated SQL Injection
Paytm – Donation Plugin <= 1.3.2 - Authenticated (Admin+) SQL Injection
M-vSlider <= 2.1.3 - Authenticated (Admin+) SQL Injection
Project Status <= 1.6 - Reflected Cross-Site Scripting
Edit Comments <= 0.3 - Reflected Cross-Site Scripting
AceIDE <= 2.6.2 - Authenticated (Admin+) Arbitrary File Read
Email Subscriber <= 1.1 - Stored Cross-Site Scripting
Timeline Calendar <= 1.2 - Authenticated (Admin+) SQL Injection
Broken Link Manager <= 0.6.5 - Authenticated (Admin+) SQL Injection
GTranslate Pro and GTranslate Enterprise <= 2.8.64 - Reflected Cross-Site Scripting
Diary & Availability Calendar <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.