Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Slick Sitemap <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App <=7.0.3.0 - Reflected Cross-Site Scripting
Moodle allows users to retrieve information they did not have permission to access
Moodle Lesson activity password bypass through PHP loose comparison
Moodle IDOR when accessing list of course badges
Moodle IDOR when deleting OAuth2 linked accounts
affiliate-toolkit <= 3.6.7 - Reflected Cross-Site Scripting
Shopready <= 3.5 - Authenticated (Contributor+) Local File Inclusion
Branda – White Label & Branding, Custom Login Page Customizer <= 3.4.19 - Reflected Cross-Site Scripting
Dynamic "To Top" 3.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Contact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion
BSK Forms Validation <= 1.7 - Reflected Cross-Site Scripting
Pricing table addon for elementor <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
Add Chat App Button <= 2.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor
Pure CSS Circle Progress bar <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Tutor LMS <= 2.7.6 - User Registration Setting Bypass to Unauthorized User Registration
Tutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filter
SP Blog Designer <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
ForumEngine <= 1.8 - Reflected Cross-Site Scripting
Block Editor Bootstrap Blocks <= 6.6.1 - Reflected Cross-Site Scripting via tab
Absolute Addons For Elementor <= 1.0.14 - Authenticated (Contributor+) Local File Inclusion
Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post Disclosure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.