Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosFeed Them Social – for Twitter feed, Youtube and more <= 2.9.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
VR Calendar <= 2.3.1 - Reflected Cross-Site Scripting
Trust Payments Gateway (3DS2) <= 1.2.0 - Cross-Site Request Forgery
uContext for Amazon <= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting
SearchWP Live Ajax Search <= 1.6.1 - Sensitive Information Disclosure
Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension <= 3.1.2 - Authenticated Arbitrary Options Update
Flipbox – Awesomes Flip Boxes Image Overlay <= 2.6.0 - Authenticated (Admin+) Arbitrary Options Update
WP-DBManager <= 2.80.7 - Authenticated (Admin+) Remote Code Execution on Multi-Site
TranslatePress <= 2.3.2 - Authenticated (Administrator+) SQL Injection
WP Libre Form 2 <= 2.0.8 - Sensitive Information Disclosure
WordPress Membership, User Registration, Login Form, User Profile & Restrict Content Plugin – ProfilePress <= 3.2.15 - Reflected Cross-Site Scripting
Transposh WordPress Translation <= 1.0.9.1 - Authenticated (Admin+) SQL Injection via 'tp_editor'
Transposh WordPress Translation <= 1.0.7 - Reflected Cross-Site Scripting via tp_tp
Transposh WordPress Translation <= 1.0.9.1 - Remote Code Execution
VR Calendar <= 2.3.1 - Unauthenticated Remote Code Execution
Transposh WordPress Translation <= 1.0.9.1 - Cross-Site Request Forgery
Transposh WordPress Translation <= 1.0.7 - Unauthenticated Stored Cross-Site Scripting via 'tp_translation'
Stockists Manager for Woocommerce <= 1.0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Simple Banner <= 2.11.0 - Authenticated Stored Cross-Site Scripting
Transposh WordPress Translation <= 1.0.9.1 - Missing Authorization Checks
GREYD.SUITE <= 1.2.6 - Unauthenticated Arbitrary File Upload
All in One Invite Codes <= 1.0.15 - Authenticated (Admin+) Stored Cross-Site Scripting
Digital Publications by Supsystic <= 1.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.