Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosWordPress Download Manager <= 3.2.33 - Authenticated SQL Injection
AnyComment <= 0.2.17 - Cross-Site Request Forgery
WOOCS <= 1.3.7.4 - Reflected Cross-Site Scripting via AJAX action
AnyComment <= 0.2.17 - Race Condition
Shield Security <= 13.0.5 - Admin+ Stored Cross-Site Scripting
Support Board <= 3.4.1 - Authenticated SQL Injection
WP HTML Mail <= 3.0.9 - Missing Authorization on Rest Route
GiveWP <= 2.17.2 - Reflected Cross-Site Scripting
Better Messages <= 1.9.9.148 - Cross-Site Request Forgery
AccessPress Social Icons 1.8.2 - Backdoor
Five Star Business Profile and Schema <= 2.1.6 - Subscriber+ Page Creation & Settings Update to Stored Cross-Site Scripting
Image Photo Gallery Final Tiles Grid <= 3.5.2 - Contributor+ Stored Cross-Site Scripting
GiveWP <= 2.17.2 - Reflected Cross-Site Scripting
Better Messages <= 1.9.9.148 - Cross-Site Request Forgery
FeedWordPress <= 2021.0713 - Reflected Cross-Site Scripting
Translation Exchange <= 1.0.14 - Stored Cross-Site Scripting
User Registration, Login & Landing Pages <= 1.2.7 - Admin+ Stored Cross-Site Scripting
GiveWP <= 2.17.2 - Reflected Cross-Site Scripting via Import Tool
The Buffer Button <= 1.0 - Cross-Site Scripting
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 4.7.4 - Stored Cross-Site Scripting via Profile
WordPress Newsletter Plugin – Noptin < 1.6.5 - Open Redirect
CMP - Coming Soon & Maintenance Plugin <= 4.0.18 - Unauthenticated Arbitrary CSS Update
Popup | Custom Popup Builder <= 1.3 - Denial of Service
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.