Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosWP Database Backup <= 5.8.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Debug Bar ElasticPress <= 2.1.0 - Cross-Site Scripting
Calendar Event Multi View <= 1.4.06 - Missing Authorization to Stored Cross-Site Scripting
Helpful <= 4.5.14 - Authorization Bypass to Repeat Voting
Visual Portfolio, Photo Gallery & Post Grid <= 2.17.1 - Unauthenticated CSS Injection
Visual Portfolio, Photo Gallery & Post Grid <= 2.18.0 - Contributor+ CSS Injection
All-in-One WP Migration <= 7.62 - Authenticated (Admin+) Cross-Site Scripting
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Local File Inclusion
Fast Flow <= 1.2.11 - Reflected Cross-Site Scripting
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Reflected Cross-Site Scripting
Protect uploads <= 0.3 - Authorization Bypass
Notification Bar for WordPress <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting
Alpine PhotoTile for Pinterest <= 1.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Uploading SVG, WEBP and ICO files <= 1.0.1 - Authenticated Stored Cross-Site Scripting
THE Leads Management System: 59sec LITE <= 3.4.1 - Authorization Bypass
Uploading SVG, WEBP and ICO files <= 1.0.1 - Arbitrary File Upload
Rank Math SEO <= 1.0.95 - Server-Side Request Forgery
reSmush.it <= 0.4.3 - Missing Authorization
SP Project & Document Manager <= 4.59 - Reflected Cross-Site Scripting
Simple Payment Donations <= 4.2.0 - Reflected Cross-Site Scripting
Easy Digital Downloads <= 3.0.1 - PHP Object Injection
Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization
Directorist <= 7.3.0 - Sensitive Information Disclosure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.