Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosSVG Support <= 2.3.19 Admin+ Cross-Site Scripting
Asset CleanUp <= 1.3.8.4 - Reflected Cross-Site Scripting via AJAX Action
NextScripts: Social Networks Auto-Poster <= 4.3.24 - Arbitrary Post Deletion via Cross-Site Request Forgery
Visual CSS Style Editor <= 7.5.3 - Reflected Cross-Site Scripting via wyp_page_type parameter
Document Embedder <= 1.7.8 - Subscriber+ Arbitrary Private/Draft Post Title Disclosure
NextScripts: Social Networks Auto-Poster <= 4.3.23 - Unauthenticated Stored Cross-Site Scripting
Document Embedder < 1.7.6 - Sensitive Data Exposure
WP Photo Album Plus <= 8.0.10 - Stored Cross-Site Scripting
Include Me <= 1.2.1 - Local File Inclusion leading to Authenticated Remote Code Execution
Custom Dashboard & Login Page < 6.9.5 - Admin+ Stored Cross-Site Scripting
Wicked Folders <= 2.18.9 - Subscriber+ SQL Injection
Link Library <= 7.2.7 - Cross-Site Request Forgery to Library Settings Reset
Link Library <= 7.2.8 - Reflected Cross-Site Scripting
Link Library <= 7.2.7 - Missing Authorization Checks
Error Log Viewer by BestWebSoft <= 1.1.1 - Cross-Site Request Forgery
Orange Form <= 1.0.1 - Cross-Site Request Forgery
Learning Courses < 5.0 - Authenticated Cross-Site Scripting
Orange Form <= 1.0.1 - Cross-Site Request Forgery
WP-DownloadManager plugin <= 1.68.6 - Reflected Cross-Site Scripting
WOOF - Products Filter for WooCommerce <= 1.2.6.2 - Reflected Cross-Site Scripting
Insight Core <= 1.0 - Authenticated PHP Object Injection & Stored Cross-Site Scripting
Domain Check <= 1.0.16 - Reflected Cross-Site Scripting via domain
LabTools <= 1.0 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.