Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosInvitation Based Registrations <= 2.2.84 - Authenticated (Admin+) Stored Cross-Site Scripting
AnyMind Widget <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic <= 9.7.5 - Information Disclosure
Video Lightbox <= 1.9.5 - Authenticated Stored Cross-Site Scripting
Allow SVG Files <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting
Ivory Search <= 5.4.6 - Reflected Cross-Site Scripting
NextScripts: Social Networks Auto-Poster <= 4.3.25 - Reflected Cross-Site Scripting
Booster for WooCommerce <= 5.5.9 - Reflected Cross-Site Scripting
Popup Anything – A Marketing Popup and Lead Generation Conversions <= 2.1.6 - Reflected Cross-Site Scripting
Yellow Yard Searchbar <= 2.7.27 - Reflected Cross-Site Scripting
Photo Gallery by 10Web <= 1.6.8 - Authenticated (Admin+) Cross-Site Scripting
WP All Import <= 3.6.7 - Admin+ Arbitrary File Upload
ND Shortcodes <= 6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Popup Builder – Create highly converting, mobile friendly marketing popups. <= 4.1.11 - Cross-Site Request Forgery to Settings Update
Accordions – Multiple Accordions or FAQs Builder <= 2.0.2 - Unauthenticated Arbitrary Options Update
Form – Contact Form <= 1.2.0 - Administrator+ Cross-Site Scripting
WP Video Lightbox <= 1.9.4 - Reflected Cross-Site Scripting
Music Player for WooCommerce <= 1.0.172 - Authenticated (Admin+) Stored Cross-Site Scripting
Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload
Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension <= 3.0.2 - Unauthenticated Arbitrary Options Update
Featured Image from URL (FIFU) <= 3.9.9 - Cross-Site Request Forgery
CAPTCHA 4WP <= 7.0.6.1 - Cross-Site Request Forgery to Local File Inclusion
WordPress Popular Posts <= 5.5.1 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.