Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosFileviewer <= 2.2 - Cross-Site Request Forgery
SP Project & Document Manager <= 4.25 - Reflected Cross-Site Scripting
SEOPress 5.0.0 - 5.0.3 - Stored Cross-Site Scripting
WordPress Advanced Ticket System, Elite Support Helpdesk <= 1.0.63 - Authenticated (Admin+) Stored Cross-Site Scripting
WP Cerber < 8.9.3 - Access Bypass Control
RAYS Grid <= 1.2.2 - Cross-Site Request Forgery Bypass
Amazon Auto Links <= 4.6.19 - Reflected Cross-Site Scripting
Language Bar Flags <= 1.0.8 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
Sell Media <= 2.5.5 - Cross-Site Request Forgery Bypass
WP-Backgrounds Lite <= 2.3 - Cross-Site Request Forgery Bypass
Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Cross-Site Request Forgery
WooCommerce Etsy Integration <= 3.3.1 - Cross-Site Request Forgery Bypass
Event Espresso 4 Decaf <= 4.10.11 - Cross-Site Request Forgery Bypass
Afterpay Gateway for WooCommerce <= 3.2.0 - Reflected Cross-Site Scripting
WP Cerber Security < 8.9.3 - Multifactor Bypass
Email Artillery (MASS EMAIL) <= 4.1 - Authenticated SQL Injection
Opal Estate <= 1.6.11 - Missing Authorization
Rucy <= 0.4.4 - Cross-Site Request Forgery Bypass
WP Courses LMS < 2.0.44 - Authenticated Stored Cross-Site Scripting
Email Artillery (MASS EMAIL) <= 4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CBX Bookmark & Favorite <= 1.6.8 - Reflected Cross-Site Scripting
Post Carousel < 2.3.5 - Missing Capabilities Check
Smash Balloon Social Post Feed <= 2.19.1 - Unauthenticated Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.