Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosiThemes Sync <= 2.0.17 - Authentication Bypass
SoundPress Plugin <= 2.2.0 - Stored Cross-Site Scripting
ShopWP <= 2.0.4 - Missing Authorization to Stored Cross-Site Scripting
Download Plugins and Themes from Dashboard <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting
Event Espresso Free/Lite <= 3.1.37.12.L - Unauthenticated SQL Injection
Theme Editor <= 2.1 - Cross-Site Request Forgery
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Stored Cross-Site Scripting
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Server-Side Request Forgery
GiveWP <= 2.5.4 - Authorization Bypass
Duplicate Post <= 3.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Easy Fancybox <= 1.8.17 - Authenticated Stored Cross-Site Scripting
Rich Reviews <= 1.7.4 - Stored Cross-Site Scripting
Zoner - Real Estate WordPress Theme < 4.2 - Cross-Site Scripting
Simple Fields <= 1.4.11 - Cross-Site Scripting
DELUCKS SEO < 2.1.8 - Stored Cross Site Scripting
WP Google Map Plugin <= 4.0.9 - Cross-Site Request Forgery to PHP Object Injection
WP MAPS – Easiest & Most Advanced WordPress Plugin for Google Maps <= 4.0.9 - Reflected Cross-Site Scripting
Ultimate FAQ <= 1.8.24 - Unauthenticated Options Import/Export
Ultimate FAQ <= 1.8.24 - Cross-Site Scripting
Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated Settings Import/Export
Motors – Car Dealer, Classifieds & Listing <= 1.4.0 - Stored Cross-Site Scripting
Export Users to CSV < 1.4 - CSV Injection
WooCommerce AJAX Product Filters <= 1.3.6 - Arbitrary Settings Update
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.