Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosFeed Them Social – for Twitter feed, Youtube and more <= 2.9.9 - Cross-Site Request Forgery to Settings update
Becustom <= 1.0.5.2 - Cross-Site Request Forgery
Comic Book Management System < 2.2.0 - Authenticated (Administrator+) SQL Injection
Photospace Gallery <= 2.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Follow Me Plugin <= 3.1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Floating Chat Widget - Chaty <= 3.0.2 - Authenticated (Administrator+) SQL Injection
Workreap < 2.6.3 - Insecure Direct Objection Reference to Private Message Disclosure
AdRotate Banner Manager <= 5.9 - Cross-Site Request Forgery
YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery
Broken Link Checker <= 1.11.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Activity Reactions For Buddypress <= 1.0.22 - Missing Authorization
PostmagThemes Demo Import <= 1.0.7 - Authenticated (Administrator+) Arbitrary File Upload
Chameleon <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization
Add Multiple Marker <= 1.2 - Missing Authorization Checks to Settings Update
Add Multiple Marker <= 1.2 - Cross-Site Request Forgery
Activity Reactions For Buddypress <= 1.0.22 - Cross-Site Request Forgery
Uji Countdown <= 2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
WPUpper Share Buttons <= 3.42 - Authenticated (Admin+) Stored Cross-Site Scripting
WP Page Builder <= 1.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Clerk <= 3.8.2 - Authorization Bypass via Insufficient Validation
Advanced WP Columns <= 2.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.