Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosPaid Memberships Pro < 2.3.3 - Authenticated SQL Injection
WP Frontend Profile <= 1.2.1 - Cross-Site Request Forgery
Visual Composer <= 26.0 - Multiple Cross-Site Scripting
Ajax Load More plugin < 5.3.2 - SQL Injection
Simple File List <= 4.2.7 - Arbitrary File Deletion
Team Members <= 5.0.3 - Authenticated Cross-Site Scripting
Photo Gallery by 10Web <= 1.5.54 - SQL Injection via bwg_search_x Parameter
Login/Signup Popup < 1.5 - Missing Authorization
WP Product Review Lite <= 3.7.5 - Unauthenticated Stored Cross Site Scripting
Easy Testimonials <= 3.5.2 - Authenticated Stored Cross-Site Scripting
iubenda < 2.3.5 - Failure to Restrict URL Protocol
Paytium <= 3.1.1 - Stored Cross-Site Scripting
ImageBoss – Images Up To 60% Smaller & CDN < 3.0.6 - Cross-Site Scripting
Page Builder by SiteOrigin <= 2.10.15 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Chop Slider 3 <= 3.4 - Unauthenticated SQL Injection
iframe <= 4.4 - Authenticated Stored Cross Site Scripting
Ultimate Addons for Elementor <= 1.24.1 - Registration Bypass
Elementor Pro <= 2.9.3 - Authenticated (Subscriber+) Arbitrary File Upload
WooCommerce <= 4.0.4 - Unauthorized Post Meta Creation/Modification
Page Builder by SiteOrigin <= 2.10.15 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
wpForo Forum <= 1.6.5 - Cross-Site Scripting via s parameter
wpForo Forum <= 1.6.5 - Cross-Site Scripting via wpf-dw-td-value class
FooGallery <= 1.9.24 - Authenticated Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.