Alta
a7c32efa-1872-4302-a947-dc0005080e55
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtros
Media
87ca4c05-b9fc-4932-be4b-beb57ca3bb7e
WordPress Content Slide <= 1.4.2 - Cross-Site Scripting
Crítica
6b456815-ffdf-41fb-b4a8-0f22fd059d34
AJAX Store Locator <= 1.2 - SQL Injection
Media
f7cb3540-ffdb-4b4c-a518-4ca8232ab53f
WP Statistics < 9.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Alta
b0907cb0-b101-4c88-9a8b-b35133e1d0a2
MiwoFTP < 1.0.6 - Cross-Site Request Forgery leading to Remote Code Execution
Media
CVE-2014-4518
Contact Form by ContactMe.com <= 2.3 - Cross-Site Scripting
Alta
CVE-2015-9337
Profile Builder <= 2.1.3 - Missing Access Controls
Alta
1ab0d9f3-0185-41f1-bab5-f47f828fa79c
MiwoFTP < 1.0.6 - Cross-Site Request Forgery to Arbitrary File Deletion
Media
e6de7a25-3079-4023-9faa-7a63952afe25
Crayon Syntax Highlighter <= 2.6.10 - Directory Traversal
Media
c6168ee5-5df3-4d79-96bb-95029f2ac54b
iThemes Security <= 4.6.12 - Stored Cross-Site Scripting
Media
CVE-2015-3325
WP Symposium < 15.4 - SQL Injection
Alta
2db8e79f-e70b-421f-8120-7aa65e704deb
MiwoFTP < 1.0.5 - Arbitrary File Download
Media
CVE-2015-9493
My Wish List < 1.4.2 - Cross-Site Scripting
Crítica
c96507cf-3c2d-4516-92f5-d08384aa6b1a
WORDPRESS VIDEO GALLERY <= 2.8 - SQL Injection
Crítica
CVE-2015-10137
Website Contact Form With File Upload <= 1.3.4 - Arbitrary File Upload
Crítica
CVE-2015-9333
cformsII < 14.6.10 - SQL Injection
Media
c342fe87-59f3-43e9-8694-cc2551650a91
Fusion Engage <= 1.0.5 - Local File Inclusion
Alta
3762cd92-604a-4dac-a09e-6b4a08c4d804
Duplicator <= 0.5.14 - SQL Injection
Alta
5aeca3b6-6b1b-40b5-8824-de4a90c7ddc3
Gantry 4 Framework <= 4.1.3 - Remote Code Execution
Alta
3ba84be8-c6dc-4cb7-b93c-38c69ab07154
WP REST API (WP API) < 1.2.1 - Sensitive Information Disclosure
Crítica
1e37e54b-9c00-4d04-9c81-791242d45d6c
iDump iPhone to WordPress Photo Uploader <= 1.8 - Arbitrary File Upload
Crítica
CVE-2015-9530
Easy Digital Downloads – Upload File <= 1.0.4 - Arbitrary File Upload/Deletion
Alta
CVE-2015-3986
TheCartPress eCommerce Shopping Cart <= 1.5.3.6 Cross-Site Request Forgery
Media
CVE-2015-3429
Twenty Fifteen Theme <= 1.1 & WordPress Core < 4.2.2 - Cross-Site Scripting via example.html
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.