Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosListeo - Directory & Listings With Booking - WordPress Theme < 1.6.11 - Insecure Direct Object Reference
Mediumish <= 1.0.60 - Reflected Cross-Site Scripting
Database Backup for WordPress <= 2.3.3 - Authenticated Stored Cross-Site Scripting via backup_receipient Parameter
Bello - Directory & Listing <= 1.5.9 - Unauthenticated SQL Injection
WooCommerce Amazon Pay 2.0.0 - Reflected Cross-Site Scripting
WP Super Cache <= 1.7.2 - Authenticated Remote Code Execution
Hotscot Contact Form < 1.3 - SQL Injection
External Media <= 1.0.33 - Authenticated Arbitrary File Upload
Tradetracker-Store < 4.6.60 - Authenticated SQL Injection
Weekly Schedule <= 3.4.2 - Stored Cross-Site Scripting
Photo Gallery <= 1.5.66 - Authenticated Stored Cross-Site Scripting via Gallery Title
LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin <= 4.21.0 - Stored Cross-Site Scripting
All in One SEO <= 4.1.0.1 - Authenticated Code Injection
Simple Giveaways <= 2.36.1 - Reflected Cross-Site Scripting
ReDi Restaurant Reservation <= 21.0307 - Stored Cross-Site Scripting
UpdraftPlus WordPress Backup Plugin < 1.6.59 - Stored Cross-Site Scripting
Wishlist and Compare for WooCommerce <= 1.0.4 - Authorization Bypass
Ultimate Member <= 2.1.19 - Reflected Cross-Site Scripting
Autoptimize <= 2.8.3 - Stored Cross-Site Scripting
DSGVO All in one for WP <= 3.9 - Unauthenticated Stored Cross-Site Scripting
leads5050-visitor-insights < 1.0.4 - Unauthenticated Arbitrary License Change
UltimateWoo – The Ultimate WooCommerce Plugin with Unlimited Usage <= 0.1.10 - PHP Object Injection
Product Filter by WooBeWoo <= 1.4.9 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.