Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosMedia Library Categories <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Oxygen < 4.4 - Cross-Site Request Forgery
Post Connector <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
eaSYNC <= 1.3.11 - Reflected Cross-Site Scripting
Gestion-Pymes <= 1.5.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Disabler <= 3.0.3 - Cross-Site Request Forgery
Language <= 1.2.1 - Missing Authorization
Elastic Email Sender <= 1.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Subscribe to Category <= 2.7.4 - Unauthenticated SQL Injection
WP-FlyBox <= 6.46 - Cross-Site Request Forgery
WP-CopyProtect [Protect your blog posts] <= 3.1.0 - Cross-Site Request Forgery via CopyProtect_options_page
Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure
WP Emoji One <= 0.6.0 - Cross-Site Request Forgery
Smarty for WordPress <= 3.1.35 - Cross-Site Request Forgery via displaySmartyManagementPage
Elementor <= 3.5.4 - DOM-Based iFrame Injection
GTmetrix for WordPress <= 0.4.7 - Cross-Site Request Forgery
T1 Theme <= 19.0 - Open Redirect
Art Decoration Shortcode <= 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Post List With Featured Image <= 1.2 - Reflected Cross-Site Scripting
WP Brutal AI < 2.06 - Authenticated (Administrator+) Stored Cross-Site Scripting
wpShopGermany IT-RECHT KANZLEI <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Ninja Popups <= 4.7.7 - Open Redirect
what3words Address Field <= 4.0.0 - Authenticated (Administrator+) Sensitive Information Exposure in class-w3w-autosuggest-public.php
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.