Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosWP Google Map <= 1.8.0 - Missing Authorization
RegistrationMagic <= 5.0.1.7 - Authentication Bypass
PublishPress Capabilities <= 2.3 - Unauthenticated Arbitrary Options Update
WP Google Map <= 1.8.0 - Subscriber+ Arbitrary Post Deletion and Plugin Settings Update
10Web Social Photo Feed <= 1.4.28 - Reflected Cross-Site Scripting
Tab – Accordion, FAQ < 1.3.2 - Unauthenticated Arbitrary Tab Modification
Events Made Easy <= 2.2.35 - Subscriber+ SQL Injection
Multivendor Marketplace Solution for WooCommerce – WC Marketplace < 3.8.4 - Reflected Cross-Site Scripting
Booking Calendar <= 8.9.1 - Reflected Cross-Site Scripting
WooCommerce PDF Invoices & Packing Slips <= 2.10.4 - Reflected Cross-Site Scripting via tab and section parameter
Site Reviews <= 5.17.2 - Unauthenticated Stored Cross-Site Scripting
WPcalc – Create any online calculators <= 2.1 - SQL Injection
Stars Rating <= 3.5.0 - Denial of Service
PowerPack Addons for Elementor <= 2.6.1 - Reflected Cross-Site Scripting
UpdraftPlus WordPress Backup Plugin <= 1.16.65 - Reflected Cross-Site Scripting
Share-one-Drive <= 1.15.2 - Reflected Cross-Site Scripting
Use-Your-Drive < 1.18.3 - Reflected Cross-Site Scripting
Floating Chat Widget: Contact Icons, Messages, Telegram, Email, SMS, Call Button - Chaty <= 2.8.2 Reflected Cross-Site Scripting
Button Generator – easily Button Builder <= 2.3.2 - Cross-Site Request Forgery
Modal Window – create popup modal window <= 5.2.1 - Cross-Site Request Forgery to Remote Code Execution
WP Coder <= 2.5.1 - Remote File Inclusion leading to Remote Code Execution via Cross-Site Request Forgery
Survey Maker <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting
Modern Events Calendar Lite <= 6.1.6 - Subscriber+ Category Add Leading to Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.