Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosDeepL Pro API Translation <= 1.7.4 - Sensitive Information Disclosure
Restaurant Menu – Food Ordering System – Table Reservation <= 2.3.0 - Missing Authorization on AJAX Actions
Advanced Dynamic Pricing for WooCommerce <= 4.1.5 - Cross-Site Request Forgery
Advanced Coupons for WooCommerce Coupons <= 4.5 - Cross-Site Request Forgery
TeraWallet – For WooCommerce <= 1.3.24 - Cross-Site Request Forgery via lock_unlock_terawallet
Appointment Hour Booking <= 1.3.71 - Missing Authorization
Soledad <= 8.2.5 - Authenticated (Subscriber+) Cross-Site Scripting
Appointment Booking Calendar <= 1.3.69 - Missing Authorization
Custom Product Tabs for WooCommerce <= 1.7.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Evaluate <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Glossary <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Forms by CaptainForm <= 2.5.3 - Cross-Site Request Forgery
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Remote Code Execution via Multi-Select
Comments – wpDiscuz <= 7.4.2 - Insecure Direct Object References
My wpdb <= 1.1.12 - Cross-Site Request Forgery to Arbitrary SQL Query Execution
Creative Mail <= 1.5.4 - Cross-Site Request Forgery to Settings Disconnect
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Limited Remote Code Execution via um_populate_dropdown_options
Creative Mail <= 1.5.4 - Cross-Site Request Forgery
Api2Cart Bridge Connector <= 1.1.0 - Arbitrary Code Execution
Slideshow SE <= 2.5.5 - Authenticated (Subscriber+) Cross-Site Scripting
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Contributor+) Directory Traversal via Shortcodes
WP Best Quiz <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting
Ask Me < 6.8.7 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.