Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosIntegration for WooCommerce and QuickBooks <= 1.2.3 - Open Redirect via setup_plugin
Pinpoint Booking System <= 2.9.9.3.4 - Content Spoofing
Client Portal : SuiteDash Direct Login <= 1.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
TS Webfonts for SAKURA <= 3.1.2 - Cross-Site Request Forgery
Media Library Categories <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Oxygen < 4.4 - Cross-Site Request Forgery
Post Connector <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
eaSYNC <= 1.3.11 - Reflected Cross-Site Scripting
Gestion-Pymes <= 1.5.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Disabler <= 3.0.3 - Cross-Site Request Forgery
Language <= 1.2.1 - Missing Authorization
Elastic Email Sender <= 1.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Subscribe to Category <= 2.7.4 - Unauthenticated SQL Injection
WP-FlyBox <= 6.46 - Cross-Site Request Forgery
WP-CopyProtect [Protect your blog posts] <= 3.1.0 - Cross-Site Request Forgery via CopyProtect_options_page
Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure
WP Emoji One <= 0.6.0 - Cross-Site Request Forgery
Smarty for WordPress <= 3.1.35 - Cross-Site Request Forgery via displaySmartyManagementPage
Elementor <= 3.5.4 - DOM-Based iFrame Injection
GTmetrix for WordPress <= 0.4.7 - Cross-Site Request Forgery
T1 Theme <= 19.0 - Open Redirect
Art Decoration Shortcode <= 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Post List With Featured Image <= 1.2 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.