Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosDELUCKS SEO < 2.1.8 - Stored Cross Site Scripting
WP Google Map Plugin <= 4.0.9 - Cross-Site Request Forgery to PHP Object Injection
WP MAPS – Easiest & Most Advanced WordPress Plugin for Google Maps <= 4.0.9 - Reflected Cross-Site Scripting
Ultimate FAQ <= 1.8.24 - Unauthenticated Options Import/Export
Ultimate FAQ <= 1.8.24 - Cross-Site Scripting
Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated Settings Import/Export
Motors – Car Dealer, Classifieds & Listing <= 1.4.0 - Stored Cross-Site Scripting
Export Users to CSV < 1.4 - CSV Injection
WooCommerce AJAX Product Filters <= 1.3.6 - Arbitrary Settings Update
Poll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.6.24 - Unauthenticated Stored Cross-Site Scripting
Woody Ad Snippets <= 2.2.8 - Authenticated Cross-Site Scripting
Easy!Appointments <= 1.3.2 - Information Disclosure
Human Presence – Stop Form Spam Without ReCaptcha < 2.0.9 - Reflected Cross-Site Scripting
Server Log Viewer <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-group-id parameter
SlickQuiz <= 1.3.7.1 - Authenticated SQL Injection
Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via custom-write-panel-id Parameter
Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-field-css parameter
SlickQuiz <= 1.3.7.1 - Stored Cross-Site Scripting
Checklist <= 1.1.8 - Cross-Site Scripting
Groundhogg <= 2.0.8.1 - Reflected Cross-Site Scripting
Advanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File Read
LMS by LifterLMS <= 3.35.0 - Stored Cross-Site Scripting via Import
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.