Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosDownload Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export
Authenticator <= 1.3.0 - Missing Authorization
Uncanny Toolkit for LearnDash <= 3.6.3 - Cross-Site Request Forgery
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.7 - Open Redirect
Organization chart <= 1.4.1 - Cross-Site Request Forgery
WP Clictracker <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Kenta Gutenberg Blocks <= 1.0.7 - Missing Authorization
Return Refund and Exchange For WooCommerce <= 4.0.8 - Arbitrary File Upload
Content Repeater – Custom Posts Simplified <= 1.1.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Community Events <= 1.4.8 - Authenticated (Administrator+) Stored Cross Site Scripting
Quizlord <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP ULike <= 4.6.4 - Race Condition
Better Click To Tweet <= 5.10.3 - Missing Authorization
Contest Gallery <= 13.1.0.9 - Cross-Site Scripting
Activello <= 1.4.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Activello <= 1.4.6 - Reflected Cross-Site Scripting
Smart Slider 3 <= 3.5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Smart Slider 3 <= 3.5.1.9 - Authenticated (Contributor+) PHP Object Injection
miniOrange's Google Authenticator <= 5.6.1 - Sensitive Data Exposure of Multifactor Backup Codes
Image Map Pro < 5.6.9 - Cross-Site Request Forgery
Image Map Pro < 5.6.9 - Cross-Site Request Forgery
WP-FormAssembly <= 2.0.5 - Authenticated (Contributor+) Arbitrary File Read
Defender Security <= 3.3.2 - Sensitive Information Disclosure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.