Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosHomepage Popup <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Download Monitor <= 4.7.2 - Authenticated Directory Traversal to Sensitive Information Exposure
WatchTowerHQ <= 3.6.15 - Unauthenticated Arbitrary File Deletion
WatchTowerHQ <= 3.6.15 - Unauthenticated Arbitrary File Download
phpCAS authentication library < 1.6.0 - Service Hostname Discovery Exploitation
Mantenimiento web <= 0.8 - Cross-Site Request Forgery
Subscribe to Category <= 2.7.3 - Missing Authorization
TeraWallet – For WooCommerce <= 1.4.3 - Insecure Direct Object Reference
Event Monster <= 1.2.0 - Authenticated (Administrator+) SQL Injection
WP-Polls <= 2.75.6 - IP Validation Bypass
miniOrange's Google Authenticator <= 5.6.1 - Missing Authorization to Plugin Settings Change
Gallery Images Ape <= 2.2.8 - Missing Authorization
Content Egg <= 5.4.0 - Cross-Site Request Forgery
Gallery Images Ape <= 2.2.8 - Authenticated (Contributor+) Cross-Site Scripting
Restaurant Menu – Food Ordering System – Table Reservation <= 2.3.1 - Cross-Site Request Forgery
Popup Maker <= 1.16.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP User Frontend <= 3.5.28 - Privilege Escalation
Booster Elite for WooCommerce < 1.1.7 - Cross-Site Request Forgery
Five Star Restaurant Reservations <= 2.4.11 - Missing Authorization to Stored Cross-Site Scripting
AFS Analytics <= 4.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
DeepL Pro API Translation <= 1.7.4 - Sensitive Information Disclosure
Restaurant Menu – Food Ordering System – Table Reservation <= 2.3.0 - Missing Authorization on AJAX Actions
Advanced Dynamic Pricing for WooCommerce <= 4.1.5 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.