Media
45e61d76-085d-48ba-b5ae-cc75f91d1250
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtros
Alta
CVE-2019-15647
WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg < 1.3.5 - Remote Code Execution
Alta
CVE-2019-11590
Form Maker by 10Web <= 1.13.4 - Cross-Site Request Forgery to Local File Inclusion
Alta
CVE-2019-11591
Contact Form by WD <= 1.13.4 - Cross-Site Request Forgery
Alta
CVE-2019-10673
Ultimate Member <= 2.0.39 - Cross-Site Request Forgery
Alta
CVE-2019-1000031
article2pdf <= 0.27 - Denial of Service
Crítica
05c40628-b8fc-48ff-8819-c0955d69fce0
Pipdig Power Pack (P3) <= 4.7.3 - Backdoor
Media
CVE-2019-15650
Stops Core Theme And Plugin Updates <= 8.0.4 - Insufficient Restrictions on Option Changes
Media
b09c98f2-6492-41e1-8d87-e10ed2ef5f9f
Social Media Share Buttons & Social Sharing Icons <= 2.1.7 - Reflected Cross-Site Scripting
Media
bf5fe4c5-0a18-4efb-b492-fad2ae3ca3da
Google Adsense & Banner Ads by AdsforWP < 1.6 - Cross-Site Scripting
Media
1a76571a-f820-4902-afa9-287b59a11d14
Nested Pages <= 3.0.7 - Missing Authorization
Crítica
CVE-2019-1010257
article2pdf 0.24 - 0.27 - Information Disclosure
Alta
934545ff-8886-47c7-ad50-0e5ff513a26c
PWA for WP & AMP Plugin <= 1.0.8 - Cross-Site Scripting
Crítica
f8035ed9-d267-44da-9de4-cf3d6ece7059
WP Database Backup <= 5.1.2 - Unauthenticated Settings Update to Remote Code Execution
Alta
cf48ad3b-9b3a-4052-bacf-52a729d62365
Link Checker <= 1.16.2 - Unauthenticated Stored Cross-Site Scripting
Alta
8ed9a5df-90d0-4abe-be1c-49c50a6b48b3
Duplicate Page <= 3.3 - SQL Injection
Alta
Explotada en ataques
CVE-2019-9978
Social Warfare <= 3.5.2 - Unauthenticated Arbitrary Settings Update
Media
CVE-2019-9908
Font Organizer <= 2.1.1 - Reflected Cross-Site Scripting
Crítica
CVE-2019-25141
Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update
Alta
CVE-2019-9574
WP Human Resource Management < 2.2.6 - Sensitive Information Disclosure
Alta
6fb2d9ec-1082-4209-9fc9-6f10ba3a2398
User Login History <= 1.7.0 - SQL Injection via OrderBy
Alta
2c25a344-4876-4ba8-bbc6-d1a32f4b1d08
User Login History <= 1.7.0 - SQL Injection via Order By
Crítica
f6f91414-5035-4cab-81ad-18558fe43500
Better Search < 2.2.3 - SQL Injection
Alta
CVE-2019-15329
Import and export users and customers <= 1.14.0.2 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.