Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosBrizy <= 2.4.29 - Cross-Site Scripting
Security & Malware scan by CleanTalk <= 2.120 - IP Spoofing to Protection Mechanism Bypass
WordPress Online Booking and Scheduling Plugin – Bookly <= 22.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Woocommerce Vietnam Checkout <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting
ImageMapper <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page/Post Deletion via imgmap_delete_area_ajax
Bitly's WordPress Plugin <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Code Snippets <= 3.5.0 - Cross-Site Request Forgery via load
Limit Login Attempts Reloaded <= 2.25.25 - Missing Authorization
Featured Image Caption <= 0.8.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Telephone Number Linker <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
kk Star Ratings <= 5.4.5 - Race Condition to Multiple User Voting
LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion
ShortCodes UI <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Email Templates <= 1.4.2 - Cross-Site Request Forgery via send_test_email
Product Catalog Mode For Woocommerce <= 5.0.2 - Missing Authorization
WP Travel <= 7.7.0 - Missing Authorization via Multiple AJAX Actions
Easy PayPal Shopping Cart <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Download Top 25 Social Icons <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Short URL <= 1.6.8 - Missing Authorization via multiple AJAX functions
Youzify <= 1.2.2 - Insecure Direct Object Reference
Top 10 <= 3.3.2 - Cross-Site Request Forgery via edit_count_ajax
Layer Slider <= 1.1.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medialist <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.