Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosWordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 <= 3.7.2 - Authenticated (Admin+) SQL Injection
WOOCS – Currency Switcher for WooCommerce Professional Free <= 1.3.7 - Authenticated Local File Inclusion
SendGrid <= 1.11.8 - Authorization Bypass
Charitable – Donation Plugin <= 1.6.50 - Unauthenticated Stored Cross-Site Scripting
NewsPlugin <= 1.0.18 – Cross-Site Request Forgery to Stored Cross-Site Scripting
Grid Gallery – Photo Image Grid Gallery <= 1.2.4 - Stored Cross-Site Scripting
Maintenance <= 4.02 - Authenticated Stored Cross-Site Scripting
Google Language Translator <= 6.0.9 - Reflected Cross-Site Scripting
Charitable – Donation Plugin <= 1.6.50 - Authenticated Stored Cross-Site Scripting
WP SEO TDK <= 2.1.2 - Missing Authorization to Stored Cross-Site Scripting
Giveaway <= 1.2.2 - Authenticated (Admin+) SQL Injection
KN Fix Your Title <= 1.0.1 - Stored Cross-Site Scripting
Google Language Translator <= 6.0.9 - Authenticated Cross-Site Scripting
HM Multiple Roles <= 1.2 - Privilege Escalation via Arbitrary Role Change
Elementor Addon Elements <= 1.11.7 - Cross-Site Request Forgery
Smash Balloon Plugins (Various Versions) - Reflected Cross-Site Scripting
RestroPress <= 2.8.3 - Missing Authorization
Light Messages <= 1.0 - Authenticated (Admin+) Cross-Site Scripting
Shantz WordPress QOTD <= 1.2.2 - Cross-Site Request Forgery
PhoneTrack Meu Site Manager <= 0.1 - Cross-Site Scripting
Wonder Video Embed <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Verse-O-Matic <= 4.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Custom Login Redirect <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.