Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosافزونه پیامک ووکامرس Persian WooCommerce SMS <= 4.4.0 - Cross-Site Scripting and SQL Injection
Lucky Wheel for WooCommerce – Spin a Sale <= 1.0.10 - Cross-Site Scripting
Ad Invalid Click Protector (AICP) <= 1.2.5.2 - Reflected Cross-Site Scripting and Cross-Site Request Forgery
Faculty Staff and Student Directory Plugin – Campus Directory <= 1.7.4 - Authenticated Stored Cross-Site Scripting
Shortcode for Current Date <= 2.1.4 - Stored Cross-Site Scripting
Moment.js <= 2.29.1 - Directory Traversal
Blog2Social <= 6.9.3 - PHP Object Injection
Testimonials Slider <= 3.5.8.3 - Authenticated (Editor+) Stored Cross-Site Scripting
wpDataTables – WordPress Tables & Table Charts Plugin <= 2.1.27 - Authenticated (Admin+) Stored Cross-Site Scripting
FV Flowplayer Video Player <= 7.5.18.727 - Stored Cross-Site Scripting
amr users <= 4.59.3 - Admin+ Stored Cross-Site Scripting
Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization
Weblizar Pin It Button On Image Hover And Post < 3.4 - Authorization Bypass
Quick Adsense < 2.8.2 - Missing Authorization
ULeak Security & Monitoring Plugin <= 1.2.3 - Stored Cross-Site Scripting
WP YouTube Live <= 1.7.21 - Reflected Cross-Site Scripting
Use Any Font <= 6.1.7 - Cross-Site Request Forgery to API Key Deactivation
Firebase PHP-JWT < 6.0.0 - Algorithm Confusion
WordPress Country Selector <= 1.6.5 - Reflected Cross-Site Scripting via AJAX call of check_country_selector
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.173 - Reflected Cross-Site Scripting
Animate It! < 2.4.0 - Cross-Site Scripting
Advanced Custom Fields <= 5.12 - Authenticated Information Disclosure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.