Media
f80fcadd-d6b7-4d35-bced-ada3514e60fa
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.543
Media
CVE-2016-10961
ColorWay <= 3.4.1 - Cross-Site Scripting
Alta
8a613e56-54c0-4bf5-b87f-0e4e507c1337
FormBuilder < 1.08 - SQL Injection
Media
8910d60c-45be-41a1-86fb-a0d60a78e660
WordPress Landing Pages <= 2.2.4 - Cross-Site Scripting
Alta
4f018e22-bf07-4371-afc1-3e664ea1c5a3
All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 2.3.6 - Stored Cross-Site Scripting
Media
86167b8c-6d4e-495d-96f7-8cda8e2c80b8
Social Media Share Buttons & Social Sharing Icons <= 1.5.1 - Arbitrary Options Deletion
Media
CVE-2016-10970
SupportFlow <= 0.6 - Cross-Site Scripting via a ticket excerpt.
Crítica
CVE-2016-10971
MemberSonic Lite Membership Site Plugin <= 1.2 - Authentication Bypass
Alta
6173d307-9917-4d76-b6bf-d5646b9e33d6
WP Activity Log 1.5 - 2.4.3 - Reflected Cross-Site Scripting
Media
CVE-2016-4826
Welcart e-Commerce < 1.8.3 - Reflected Cross-Site Scripting
Alta
CVE-2016-4825
Welcart e-Commerce < 1.8.3 - Object Injection
Crítica
CVE-2016-4828
Welcart e-Commerce <= 1.8.2 - Authentication Bypass
Media
CVE-2016-4827
Welcart e-Commerce <= 1.8.2 - Cross-Site Scripting
Sin evaluar
378
Universal AJAX Live Search - Other
Crítica
8ada8a27-752c-4726-b330-895b967ea290
WordPress File Upload < 3.9.0 - Arbitrary File Upload
Media
76d96ab1-e667-4242-aee3-95f8dfb07ccd
WordPress File Monitor <= 2.3.3 - Authenticated Stored Cross-Site Scripting
Crítica
CVE-2016-1000112
Contus Video Comments <= 1.0 - Remote File Upload
Alta
8530affb-0b6e-4b71-acab-3561cccc1855
Advanced Access Manager <= 3.2.1 - Unrestricted AJAX Actions allowing Privilege Escalation
Alta
CVE-2016-10968
Community by PeepSo – Social Network, Membership, Registration, User Profiles < 1.6.1 - Privilege Escalation
Media
CVE-2016-10705
Jetpack <= 4.0.3 - Cross-Site Scripting
Media
4fbeee29-751a-48c9-a875-393441f62dde
Lingotek Translation <= 1.1.8 - Cross-Site Scripting
Alta
CVE-2016-10969
SupportFlow <= 0.6 - Stored Cross-Site Scripting via discussion ticket title
Media
CVE-2016-5833
WordPress Core < 4.5.3 - Cross-Site Scripting via Attachment Name #2
Media
CVE-2016-5838
WordPress Core < 4.5.3 - Password Change via Stolen Cookie
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.