Media
afb032da-11cc-4272-be68-60b6ca6e6ca3
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Media
a713c7d3-06ce-4d65-9766-2b0331656ae6
Popup Like box – Page Plugin <= 3.5.2 - Cross-Site Scripting
Alta
CVE-2021-24463
Image Slider by Ays- Responsive Slider and Carousel < 2.5.0 - SQL Injection
Alta
CVE-2021-24501
Workreap Theme < 2.2.2 - Authorization Bypass
Media
8c68cf18-0210-452f-933e-6f1e50323b15
Popup box <= 2.3.3 - Cross-Site Scripting
Media
4ec30511-40cb-433e-977c-df5be8c3d8f2
Photo Gallery by Ays – Responsive Image Gallery <= 4.4.3 - Reflected Cross-Site Scripting
Alta
CVE-2021-24462
Photo Gallery by Ays - Responsive Image Gallery <= 4.4.3 - Authenticated Blind SQL Injections
Alta
CVE-2021-24457
Portfolio Responsive Gallery <= 1.1.7 - Blind SQL Injection
Alta
CVE-2021-24460
Popup Like box – Page Plugin < 3.5.3 - SQL Injection
Media
CVE-2021-24494
WP Offload SES Lite <= 1.4.4 - Stored Cross-Site Scripting
Alta
CVE-2021-24456
Quiz Maker <= 6.2.0.8 - SQL Injection
Media
06d374b0-a4a6-4f0e-af85-66b3a50b1354
Portfolio Responsive Gallery <= 1.1.7 - Cross-Site Scripting
Baja
CVE-2021-24371
RSVPMaker <= 8.7.2 - Server-Side Request Forgery
Alta
CVE-2021-24483
Poll Maker <= 3.2.0 - SQL Injection
Crítica
CVE-2021-34622
ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
Crítica
CVE-2021-34624
ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload
Alta
CVE-2021-32723
Regular Expression Denial of Service (ReDoS) in Prism
Media
ghsa-243q-g9j3-qf6r
non-admin users can create integration role with administrator role
Media
CVE-2021-32716
Exposure of Sensitive Information to an Unauthorized Actor
Alta
CVE-2021-32717
Exposure of Sensitive Information to an Unauthorized Actor
Alta
CVE-2021-21422
Cross-site scripting
Crítica
CVE-2021-32685
Improper Verification of Cryptographic Signature
Media
CVE-2021-32709
Missing Authentication for Critical Function
Media
ghsa-wq3r-jwrq-xg6w
Canceling of orders not related to the logged-in user
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.