Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 494
Restablecer filtrosWordPress Backup & Migration <= 1.4.0 - Missing Authorization via wt_delete_schedule
UpdraftPlus <= 1.23.3 - Cross-Site Request Forgery to Cross-Site Scripting via action_authenticate_storage
WP All Backup <= 2.4.3 - Cross-Site Request Forgery to Backup Storage Modification
Backup Migration <= 1.2.8 - Sensitive Information Exposure
Wise Chat <= 3.1.3 - Cross-Site Request Forgery
Updraft <= 0.6.1 - Reflected Cross-Site Scripting via 'backup_timestamp'
LearnPress - Export/Import Courses <= 4.0.2 - Reflected Cross-Site Scripting
UpdraftPlus 1.22.14 to 1.23.2 and UpdraftPlus (Premium) 2.22.14 to 2.23.2 - Privilege Escalation via updraft_central_ajax_handler
Backup Bank: WordPress Backup Plugin <= 4.0.28 - Missing Authorization via post_user_feedback_backup_bank
Updraft Plus <= 1.22.24 - Information Disclosure via updraft_ajaxrestore
phpinfo() WP <= 4.0 - Cross-Site Request Forgery
BackupBuddy <= 8.8.2 - Reflected Cross-Site Scripting
MainWP (Various extensions) - Cross-Site Request Forgery
MainWP (Various Extensions) - Authenticated (Subscriber+) Arbitrary Plugin Installation
All-In-One Security <= 5.1.2 - Information Disclosure
Loginizer <= 1.7.5 - Cross-Site Request Forgery
miniOrange's Google Authenticator <= 5.6.1 - Sensitive Data Exposure of Multifactor Backup Codes
Download Plugin <= 1.6.2 - Missing Authorization and Sensitive Information Exposure
Backup Guard <= 1.6.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
WIP Custom Login <= 1.2.7 - Missing Authorization
Backup Scheduler <= 1.5.13 - Missing Authorization to Sensitive Information Disclosure
Backup Scheduler <= 1.5.13 - Cross-Site Request Forgery
3DPrint <= 3.5.6.8 - Cross-Site Request Forgery to Arbitrary File Download
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.