Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.670
Restablecer filtrosWP Cost Estimation <= 9.642 - Missing Authorization to Arbitrary File Upload/Delete
WP Cost Estimation < 9.660 - Upload Directory Traversal
Jetpack < 7.0.1 - Cross-Site Scripting
Newspaper < 9.2.2 - Cross-Site Scripting
Accessibility Suite by Online ADA < 2.0.11 - SQL Injection
Superlist - Directory WordPress Theme | Directory & Listings <= 2.9.2 - Stored Cross-Site Scripting
Simple Social Media Share Buttons 2.0.4 - 2.0.21 - Missing Authorization
Forminator Plugin <= 1.5.3.1 - SQL Injection
Forminator Plugin <= 1.5.4 - Cross-Site Scripting
GiveWP <= 2.3.0 - Cross-Site Scripting
NextScripts: Social Networks Auto-Poster <= 4.2.7 - Reflected Cross-Site Scripting
WP Live Chat Support <= 8.0.17 - Cross-Site Scripting
WP Google Maps < 7.10.43 - Reflected Cross-Site Scripting
YOP Poll <= 6.0.2 - Reflected Cross-Site Scripting via poll_id Parameter
Contact Form Email <= 1.2.65 - Reflected Cross-Site Scripting
KingComposer <= 2.8 - Reflected Cross-Site Scripting
WP Support Plus Responsive Ticket System <= 9.1.1 - Stored Cross-Site Scripting
NextGen Gallery <= 3.1.5 - PHP Object Injection
WP Support Plus Responsive Ticket System <= 9.1.1 - Stored Cross-Site Scripting
Parallax Scroll <= 2.0.1 - Cross-Site Scripting
Meta Box - WordPress Custom Fields Framework <= 4.16.2 - File Deletion via attachment_id Parameter
Meta Box <= 4.16.1 - Mishandling of File Upload
OneLogin SAML SSO <= 2.8.0 - Distributed Denial-of-Service
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.