Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.538
Simplified Content < 1.0.1 - Reflected Cross-Site Scripting
Anti Plagiarism <= 3.60 - Reflected Cross-Site Scripting
Bulk change of posts terms and post types <= 1.0 - Reflected Cross-Site Scripting
Admin Font Editor <= 1.7 - Reflected Cross-Site Scripting
Heat Trackr < 1.01 - Reflected Cross-Site Scripting
Pondol Form to Mail <= 1.1 - Reflected Cross-Site Scripting
Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress <= 9.3 - Missing Authorization
Duplicator < 1.1.4 - Cross-Site Request Forgery
E-Search <= 1.0 - Reflected Cross-Site Scripting via title_az parameter
New Year Firework <= 1.1.9 - Reflected Cross-Site Scripting
AJAX Random Post <= 2.0.0 - Reflected Cross-Site Scripting
Photoxhibit <= 2.1.8 - Reflected Cross-Site Scripting
Booking Calendar Contact Form <= 1.0.23 - Shortcode SQL Injection
Booking Calendar Contact Form < 1.0.24 - Blind SQL Injection
Booking Calendar Contact Form <= 1.0.23 - Reflected Cross-Site Scripting
Beaver Builder – WordPress Page Builder (Free & Pro) <= 1.7 - Authorization Bypass
WP User Frontend < 2.3.11 - Arbitrary File Upload
Image Gallery – Responsive Photo Gallery <= 1.7.0 - Reflected Cross-Site Scripting via linkbutton
Store Toolkit for WooCommerce <= 1.5.6 - Missing Authorization
Elfsight Instagram Widget – Instagram Gallery < 1.1.2 - Reflected Cross-Site Scripting
Universal Analytics <= 1.3.0 - Cross-Site Scripting
WP-Invoice – Web Invoice and Billing <= 4.1.0 - Missing Authorization
WP-Invoice – Web Invoice and Billing <= 4.1.0 - Privilege Escalation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.