Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosContact Form 7 Extension For Mailchimp <= 0.5.70 - Authenticated (Subscriber+) Server-Side Request Forgery
Word Replacer Pro <= 1.0 - Missing Authorization
Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated SQL Injection via userToken
Seraphinite Accelerator <= 2.20.47 - Unauthenticated Sensitive Information Exposure via Log File
MailerLite – WooCommerce integration <= 2.0.8 - Cross-Site Request Forgery via Multiple AJAX Functions
Advanced Flamingo <= 1.0 - Cross-Site Request Forgery
RabbitLoader <= 2.19.13 - Missing Authorization via multiple AJAX actions
LiveChat WooCommerce <= 2.2.16 - Cross-Site Request Forgery
MailerLite – WooCommerce integration <= 2.0.8 - Missing Authorization via Multiple Functions
Beds24 Online Booking <= 2.0.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Revolut Gateway for WooCommerce <= 4.9.7 - Missing Authorization
Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Envira Gallery Lite <= 1.8.7.2 - Missing Authorization to Gallery Modification via envira_gallery_insert_images
OneClick Chat to Order <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated Arbitrary File Upload via uploadFile
LiveChat Elementor <= 1.0.13 - Cross-Site Request Forgery
Metform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request Forgery
Swift SMTP <= 5.0.6 - Cross-Site Request Forgery
Download Monitor <= 4.9.4 - Authenticated (Admin+) SQL Injection
Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode
Booster Elite for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure
Oxygen Builder <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
WooCommerce <= 8.2.2 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.