Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.563
Gallery WD version
SpiderCalendar <= 1.4.9 - Unauthenticated SQL Injection
Fusion <= 3.1 - Arbitrary File Upload
Photo Gallery by 10Web <= 1.2.5 - Unrestricted File Upload
Wordpress Video Gallery <= 2.7 - SQL Injection
WordPress Core < 4.4 - Brute Force Password Recovery Tokens
CP Appointment Calendar <= 1.1.5 - Unauthenticated SQL Injection
Mobile Domain <= 1.5.2 - Cross-Site Request Forgery and Stored Cross-Site Scripting
WordPress Uninstall <= 1.2.1 - Cross-Site Request Forgery to Site Reset
Easing Slider <= 2.2.0.6 - Cross-Site Scripting
Cherry Plugin < 1.2.7 - Arbitrary File Upload
WPBakery Page Builder for WordPress (formerly Visual Composer) <= 4.7.3 - Multiple Cross-Site Scripting Issues
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin < 1.4.36 - SQL Injection
Store Locator < 3.34 - SQL Injection
Redirection Page <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting
CrossSlide jQuery Plugin <= 2.0.5 - Multiple Cross-Site Request Forgery to Stored Cross-Site Scripting
WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalation
User Meta Manager < 3.4.7 - Authenticated Blind SQL Injection
FancyBox for WordPress <= 3.0.2 - Stored Cross-Site Scripting
UpdraftPlus WordPress Backup Plugin <= 1.9.50 - Nonce Leak to Authorization Bypass
Fastly <= 0.97 - Reflected Cross-Site Scripting
Revive Old Posts – Social Media Auto Post and Scheduling Plugin < 8.0.0 - Authorization Bypass
Feed Them Social <= 1.6.9 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.