Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosWP Shieldon <= 1.6.3 - Reflected Cross-Site Scripting
Pods <= 2.7.26 - Authenticated Stored Cross-Site Scripting via Menu Label field
Pods 2.4.4.1 - 2.7.26 - Authenticated Stored Cross-Site Scripting
FV Flowplayer Video Player <= 7.4.37.727 - Authenticated Stored Cross-Site Scripting
WP Editor < 1.2.6 - Incorrect Permission Assignment or Protection
Easy Contact Form Pro < 1.1.1.9 - Authenticated Stored Cross-Site Scripting
Elementor Contact Form DB <= 1.5 - Cross-Site Request Forgery
WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Content Injection
WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
WP Quick FrontEnd Editor <= 5.5 - Authenticated Settings Change
WP Quick FrontEnd Editor <= 5.5 - Reflected Cross-Site Scripting
Five Star Restaurant Menu <= 2.2.0 - Unauthenticated Arbitrary Object Deserialization leading to Remote Code Execution
e-signature < 1.5.6.8 - Unauthenticated Remote Code Execution
Tutor LMS <= 1.9.12 - Reflected Cross-Site Scripting
Modal Survey <= 2.0.1.8 - PHP Object Injection
Modal Survey < 2.0.1.8.2 - Authorization Bypass
WP24 Domain Check <= 1.6.2 - Cross-Site Scripting
WordPress Core < 5.8.3 - SQL Injection via WP_Query
iThemes Security <= 7.6.1 - Broken Password Mechanism
Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions <= 2.5.2 - IDOR to Sensitive Information Disclosure
Accept Stripe Payments < 2.0.40 - Authenticated Stored Cross-Site Scripting
WP Paginate <= 2.1.3 - Admin+ Stored Cross-Site Scripting
Contact Form Entries <= 1.1.6 - Unauthenticated Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.