Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
SportsPress Pro <= 2.7.29 - Authenticated (Contributor+) Local File Inclusion
Golo Framework <= 1.7.3 - Authenticated (Contributor+) Local File Inclusion
WorkScout-Core <= 1.7.08 - Cross-Site Request Forgery
Fascinate <= 1.1.5 - Missing Authorization
Brook - Agency Business Creative WordPress Theme <= 2.9.0 - Authenticated (Contributor+) Local File Inclusion
WPIDE – File Manager & Code Editor <= 3.5.6 - Cross-Site Request Forgery
Tutor LMS <= 3.9.13 - Authenticated (Subscriber+) Information Exposure
Shopping Cart & eCommerce Store <= 5.9.1 - Authenticated (Contributor+) SQL Injection
Mosaic Gallery – Advanced Gallery <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Speaker <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Billey <= 2.1.8 - Authenticated (Contributor+) Local File Inclusion
Sendcloud Shipping <= 1.0.31 - Missing Authorization
Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization
TheGem Theme Elements <= 5.11.1 - Authenticated (Contributor+) Local File Inclusion
Malicious code in uprobe (PyPI)
Wagtail: Pages translations can be created without page permissions when using simple_translation
Wagtail: Denial of service via unbounded filter specs in the image preview
Wagtail: Improper permission handling in image preview
Wagtail: Improper restriction handling on Documents and Images chosen endpoints
Wagtail: Reflected XSS in dynamic image URL generator view
OpenClaw MCP SSE redirects could forward Authorization headers
Malicious code in ufish (PyPI)
Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify token
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.