Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosFunnelKit Checkout <= 3.10.3 - Authenticated(Subscriber+) Missing Authorization to Arbitrary Plugin Activation
HT Mega <= 2.3.3 - Cross-Site Request Forgery via Several Functions
WooCommerce Stripe Payment Gateway <= 7.6.1 - Insecure Direct Object Reference via update_payment_intent_ajax
Paid Member Subscriptions <= 2.10.4 - Cross-Site Request Forgery via ajax_add_log_entry
WooPayments – Fully Integrated Solution Built and Supported by Woo <= 6.6.2 - Unauthenticated Insecure Direct Object Reference
WooCommerce PDF Invoice Builder <= 1.2.101 - Cross-Site Request Forgery
Happy Addons for Elementor <= 3.9.1.1 - Server Side Request Forgery
WooCommerce Ship to Multiple Addresses <= 3.8.9 - Missing Authorization
WP Review Slider <= 12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Login as User or Customer (User Switching) <= 3.8 - Authentication Bypass
Rencontre – Dating Site <= 3.10.1 - Unauthenticated Arbitrary File Upload
Apollo13 Framework Extensions <= 1.9.1 - Cross-Site Request Forgery
Branda <= 3.4.14 - IP Address Spoofing
GPT3 AI Content Writer <= 1.8.12 - Cross-Site Request Forgery
WooCommerce Canada Post Shipping <= 2.8.3 - Missing Authorization
Product Catalog Simple <= 1.7.6 - Sensitive Information Exposure via Product CSV
MC4WP <= 4.9.9 - Missing Authorization via listen
Spam protection, AntiSpam, FireWall by CleanTalk <= 6.20 - Cross-Site Request Forgery
Thrive Automator <= 1.17 - Cross-Site Request Forgery
Quiz And Survey Master <= 8.1.18 - Cross-Site Request Forgery
RegistrationMagic <= 5.2.5.0 - IP Spoofing
TerraClassifieds <= 2.0.3 - Cross-Site Request Forgery
ARI Stream Quiz <= 1.2.32 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.