Media
99df8839-caad-4568-9b05-cb2aea38a051
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Crítica
CVE-2020-15363
Nexos - Real Estate WordPress Theme <= 1.7 - SQL Injection
Media
CVE-2020-15364
Nexos - Real Estate WordPress Theme < 1.8 - Cross-Site Scripting
Media
d524a2c1-43df-4059-b1ec-b0738026158e
Travel Booking WordPress Theme < 2.8.2 - Cross-Site Scripting
Media
9e9a8383-7044-484d-8e4a-e9e4171da385
Prolisting - Directory Listing <= 1.2 - Reflected Cross-Site Scripting
Media
CVE-2020-26672
Testimonial Rotator <= 3.0.2 - Authenticated Stored Cross-Site Scripting
Media
722d3a5e-40dc-4153-b8ce-4a94ae391896
CityBook <= 2.4.3 - Reflected Cross-Site Scripting
Media
422ae683-dbbe-43ef-b902-ae7570495f21
HomeSweet - Real Estate WordPress Theme <= 1.4 - Insecure Direct Object Reference
Media
3a7b15ce-ff0e-4693-8ceb-afa341306dc3
Findus - Directory Listing WordPress Theme < 1.1.15 - Cross-Site Scripting
Alta
0d4420bf-1095-44ca-8fa6-dd5ea11c7489
Findgo <= 1.3.31 - Cross-Site Scripting
Media
e06ceba5-9c50-442e-9cba-da64a38de00f
All in One Support Button + Callback Request <= 1.8.7 - Stored Cross-Site Scripting
Media
CVE-2020-36505
Delete All Comments Easily <= 1.3 - All Comments Deletion via Cross-Site Request Forgery
Alta
6abe93e8-b088-49d3-a658-9c6265bfbcdb
All in One Support Button + Callback Request <= 1.8.7 - Cross-Site Request Forgery
Alta
CVE-2020-36701
Page Builder: KingComposer < 2.9.4 - Arbitrary File Upload
Alta
CVE-2020-36700
Page Builder: KingComposer < 2.9.4 - Authorization Bypass due to Improper Access Control
Crítica
CVE-2020-13640
Comments - wpDiscuz <= 5.3.5 - Blind SQL Injection via order Parameter
Media
CVE-2020-4048
WordPress Core < 5.4.2 - Open Redirect
Baja
CVE-2020-4049
WordPress Core < 5.4.2 - Self-Cross Site Scripting via Theme Folder Name
Baja
CVE-2020-4050
WordPress Core < 5.4.2 - Arbitrary User Meta Update
Media
CVE-2020-25286
WordPress Core < 5.4.2 - Comment Disclosure
Media
CVE-2020-36172
Advanced Custom Fields <= 5.8.11 - Cross-Site Scripting
Media
CVE-2020-4046
WordPress Core < 5.4.2 - Authenticated Stored Cross-Site Scripting
Media
CVE-2020-4047
WordPress Core < 5.4.2 - Authenticated Stored Cross-Site Scripting
Media
CVE-2020-35037
Events Manager <= 5.9.7.3 - Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.