Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Shipyaari Shipping Management <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Table Builder – WordPress Table Plugin <= 1.4.6 - Authenticated (Admin+) Stored Cross-Site Scripting
wpDataTables <= 2.1.49 - Authenticated (Contributor+) Stored Cross Site Scripting
Video Gallery – YouTube Gallery <= 1.7.6 - Authenticated (Admin+) Stored Cross Site Scripting
Visualizer <= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Circles Gallery <= 1.0.10 - Authenticated (Admin+) Stored Cross-Site Scripting via Admin Settings
Video Gallery – YouTube Gallery <= 1.7.6 - Missing Authorization
Theme Tweaker <= 5.20 - Cross-Site Request Forgery
Clio Grow <= 1.0.0 - Authenticated (Admin+) Stored Cross Site Scripting
Protected Posts Logout Button <= 1.4.5 - Authenticated (Admin+) Cross-Site Scripting
Multiple Page Generator Plugin <= 3.3.9 - Cross-Site Request Forgery
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters
Stock market charts from finviz <= 1.0.1 - Authenticated(Admin+) Stored Cross-Site Scripting
Top 10 – Popular posts plugin for WordPress <= 3.2.3 - Cross-Site Request Forgery via tptn_ajax_clearcache
Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 3.1.20 - Cross-Site Request Forgery in add_to_favorite
ProfilePress <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Exquisite PayPal Donation <= v2.0.0 - Authenticated(Admin+) Stored Cross-Site Scripting
Video Background <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Sitemap Index <= 1.2.3 - Authenticated(Admin+) Stored Cross-Site Scripting
Easy Google Analytics for WordPress <= 1.6.0 - Cross-Site Request Forgery
Contextual Related Posts <= 3.3.1 - Missing Authorization in crp_ajax_clearcache
BuddyForms <= 2.7.7 - PHAR Deserialization
Live Streaming - Broadcast Live Video <= 5.5.15 - Missing Authorization to Unauthenticated Remote Code Execution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.