Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosDW Question & Answer Pro <= 1.3.6 - Missing Authorization Checks
Advanced Page Visit Counter <= 6.1.5 - Subscriber+ Blind SQL injection
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.39 - Cross-Site Scripting
BookingPress – Appointments Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.13 - SQL Injection
DW Question & Answer Pro <= 1.3.6 - Cross-Site Request Forgery
Nimble Page Builder <= 3.2.1 - Reflected Cross-Site Scripting
English WordPress Admin <= 1.5.1.1 - Unauthenticated Open Redirect
Floating Chat Widget: Contact Icons, Messages, Telegram, Email, SMS, Call Button – Chaty <= 2.8.3 - Admin+ Stored Cross-Site Scripting
Plausible Analytics <= 1.2.2 - Stored Cross-Site Scripting
Migration, Backup, Staging – WPvivid <= 0.9.70 - Authenticated Arbitrary File Read
UpdraftPlus WordPress Backup Plugin < 1.22.9 Reflected Cross-Site Scripting
SiteGround Security <= 1.2.5 - Authorization Weakness to Authentication Bypass
Visual Form Builder <= 3.0.6 - Admin+ Cross-Site Scripting
Ad Inserter Free and Pro <= 2.7.11 - Reflected Cross-Site Scripting
async <= 2.6.3 and 3-3.2.2 - Prototype Pollution
eRoom – Zoom Meetings & Webinar <= 1.3.7 - Unauthorized Setting Update
SiteGround Security <= 1.2.5 - Authentication Bypass via 2FA Setup
Content Egg <= 5.3.0 - Reflected Cross-Site Scripting
Unify <= 3.2.5 - Cross-Site Scripting
Pricing Table <= 1.5.2 - Authenticated (Author+) Stored Cross-Site Scripting
WP-Appbox <= 4.3.20 - Authenticated (Admin+) Stored Cross-Site Scripting
Advanced Page Visit Counter <= 5.0.8 - Unauthenticated Cross-Site Scripting
Tipsacarrier < 1.5.0.5 - Unauthenticated SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.