Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosGSEOR – WordPress SEO Plugin <= 1.3 - Authenticated (Admin+) SQL Injection
Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More < 3.3.1.0 - Authenticated SQL Injection via product_id Parameter
Display Users <= 2.0.0 - Authenticated (Admin+) SQL Injection
The Sorter <= 1.0 - Authenticated (Admin+) SQL Injection
MicroCopy <= 1.1.0 - Authenticated (Admin+) SQL Injection
WordPress Page Contact <= 1.0 - Authenticated (Admin+) SQL Injection
Responsive 3D Slider <= 1.2 - Authenticated (Admin+) SQL Injection
WP Domain Redirect <= 1.0 - Authenticated (Admin+) SQL Injection
Donate With QRCode <= 1.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Donate With QRCode <= 1.4.5 - Cross-Site Request Forgery to Settings Update
Print My Blog – Print, PDF, & eBook Converter WordPress Plugin <= 3.4.1 - Cross-Site Request Forgery
ThinkTwit < 1.7.1 - Stored Cross-Site Scripting
Shopping Cart & eCommerce Store <= 5.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Jock on air now <= 5.6.1 - Reflected Cross-Site Scripting
Jock on air now <= 5.6.2 - Unauthenticated Stored Cross-Site Scripting
Jock on air now <= 5.6.1 - Cross-Site Request Forgery to Settings Update
BuddyPress <= 9.0.0 - Information Disclosure via REST API
BuddyPress <= 9.0.0 - SQL Injection
WordPress Slider Block Gutenslider <= 5.1.5 - Cross-Site Scripting
Visual Link Preview <= 2.2.2 - Unauthorised AJAX Calls
Shopp <= 1.4 - Unauthenticated Arbitrary File Upload
MF Gig Calendar <= 1.1 - Reflected Cross-Site Scripting
Icegram <= 2.0.2 - Authenticated Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.