Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosMedia File Manager <= 1.4.2 - Reflected Cross-Site Scripting
GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership <= 1.4.13 - Arbitrary File Upload
WP Editor.md – The Perfect WordPress Markdown Editor < 10.0.4 - Cross-Site Scripting
Calendar <= 1.3.10 - Authenticated Stored Cross-Site Scripting
Elegant Themes (Various Versions) - Stored Cross-Site Scripting
Rockhoist Ratings < 1.2.3 - SQL Injection
Elementor Pro <= 2.0.9 - Cross-Site Scripting
Pie Register < 3.0.18 - Unauthenticated Cross-Site Scripting
WP-DBManager <= 2.79.1 - Directory Traversal Allowing Arbitrary File Deletion
AMP for WP <= 0.9.97.19 - Missing Authorization
All in One SEO <= 2.9.1.1 - Authenticated Stored Cross-Site Scripting
WP Live Chat Support <= 8.0.15 - Cross-Site Scripting
Arigato Autoresponder and Newsletter <= 2.7 - Arbitrary File Upload
Support Board for WordPress <= 1.2.3 - Cross-Site Scripting
Tajer <= 1.0.5 - Arbitrary File Upload
Image Intense <= 3.2.5 - SQL Injection
WP Fastest Cache <= 0.8.8.5 - Cross-Site Scripting via the rules[0][content] parameter in a wpfc_save_exclude_pages action
WP Fastest Cache <= 0.8.8.5 - Cross-Site Scripting via wpFastestCachePage options, wpFastestCachePreload_number or wpFastestCacheLanguage parameter
WP Fastest Cache <= 0.8.8.5 - Cross-Site Scripting via rules[0][content] parameter
WP Fastest Cache <= 0.8.8.5 - Cross-Site Request Forgery via page to wpfastestcacheoptions
WPML <= 3.6.3 - Unauthenticated Stored Cross-Site Scripting
Ultimate Member <= 2.0.27 - Multiple Cross-Site Scripting vulnerabilities
Slideshow Gallery <= 1.6.8 - Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.