Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
WordPress Membership SwiftCloud.io <= 1.0 - Authenticated (Admin+) SQL Injection
Cashtomer <= 1.0.0 - Authenticated (Admin+) SQL Injection
Comment Highlighter <= 0.13 - Authenticated (Admin+) SQL Injection
Simple Post <= 1.1 - Stored Cross-Site Scripting
Easy Testimonial Manager <= 1.2.0 - Authenticated (Admin+) SQL Injection
WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 <= 3.7.2 - Authenticated (Admin+) SQL Injection
Denial of Service in SheetJS Pro
Denial of Service in SheetsJS Pro
Denial of Service in SheetJS Pro
Privilege escalation: all users can access Admin-level API keys
Cross-Site Scripting in Backend Grid View
Cross-Site Scripting in Query Generator & Query View
Cross-Site Scripting in Page Preview
WOOCS – Currency Switcher for WooCommerce Professional Free <= 1.3.7 - Authenticated Local File Inclusion
drupal/form_mode_manager - SA-CONTRIB-2021-023
Drupal core - SA-CORE-2021-004
SendGrid <= 1.11.8 - Authorization Bypass
Charitable – Donation Plugin <= 1.6.50 - Unauthenticated Stored Cross-Site Scripting
NewsPlugin <= 1.0.18 – Cross-Site Request Forgery to Stored Cross-Site Scripting
Grid Gallery – Photo Image Grid Gallery <= 1.2.4 - Stored Cross-Site Scripting
Maintenance <= 4.02 - Authenticated Stored Cross-Site Scripting
Google Language Translator <= 6.0.9 - Reflected Cross-Site Scripting
Charitable – Donation Plugin <= 1.6.50 - Authenticated Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.