Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosJupiter X Core <= 2.0.9 - Missing Authorization Checks
Announcement & Notification Banner – Bulletin <= 3.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Export All URLs <= 4.3 - Arbitrary File Deletion
String Locator <= 2.5.0 - Cross-Site Request Forgery to PHAR Deserialization
Resize Image After Upload <= 1.8.5 - Cross-Site Request Forgery
WP Hide & Security Enhancer <= 1.7.9.2 - Reflected Cross-Site Scripting
Custom Product Tabs Lite for WooCommerce <= 1.7.6 - Authenticated (Store Manager+) Stored Cross-Site Scripting
Mobile Assistant Connector <= 2.2.2 - SQL Injection
WPCafe – Food Menu, WooCommerce Food Ordering, Food Delivery, Pickup and Restaurant Reservation <= 2.1.4 - Cross-Site Scripting
Frontend File Manager & Sharing – User Private Files <= 1.1.0 - Sensitive Information Disclosure
Frontend File Manager & Sharing – User Private Files <= 1.1.1 - Missing Authorization
WordPress HTTPS (SSL) <= 3.4.0 - Missing Authorization to Settings Change
Testimonial Slider <= 2.2.6 - Stored Cross-Site Scripting
WP-MUI – Mass User Input – Add and Export WP Users Quickly <= 1.8 - Missing Authorization
Minimal Coming Soon – Coming Soon Page <= 2.33 - Authenticated (Admin+) Stored Cross-Site Scripting
Twitter Bootstrap Slider <= 1.1.3 - Authenticated (Admin+) Cross-Site Scripting
WordPress to Hootsuite <= 1.4.5 - Authenticated (Admin+) Cross-Site Scripting
WordPress to Buffer <= 3.8.1 - Authenticated (Admin+) Cross-Site Scripting
Cyclone Slider <= 3.2.0 - Authenticated (Admin+) Arbitrary File Upload
Protect WP Admin <= 3.7 - Cross-Site Scripting
Contempo Real Estate Custom Posts <= 3.2.6 - Unauthorized File Upload
PostmagThemes Demo Import <= 1.0.6 - Authenticated (Admin+) Arbitrary File Upload
Simple Telegram <= 0.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.