Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41.456
Restablecer filtrosContact Form 7 Integrations 1.0 - 1.3.10 - Multiple Cross-Site scripting
Infusionsoft Gravity Forms Add-on 1.5.3 - 1.5.10 - Arbitrary File Upload
WP eCommerce < 3.8.7.6 - SQL Injection
Subscribe2 – Form, Email Subscribers & Newsletters <= 10.15 - Stored Cross-Site Scripting
Content Audit <= 1.6.0 - Authenticated (Admin+) SQL Injection
Photo Gallery by 10Web <= 1.1.30 - Reflected Cross-Site Scripting
BulletProof Security < .52.5 - Cross-Site Scripting
Category and Page Icons <= 0.9.1 - Arbitrary File Upload and Deletion
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 3.1.0 - SQL Injection
Tom M8te <= 1.5.3 - Directory Traversal
DZS Video Gallery < 7.95 - Multiple Cross-Site Scripting
DZS Video Gallery < 7.95 - Limited Local File Inclusion
bSuite <= 5 alpha 2 - Multiple Cross-Site Scripting
Wordfence Security <= 5.2.3 - Stored Cross-Site Scripting via HTTP_HOST
Easy Forms for Mailchimp 3.0 - 5.0.6 - Cross-Site Scripting
Frontend File Manager Plugin < 3.6 - Arbitrary File Upload
I Recommend This <= 3.7.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
All In One WP Security & Firewall <= 3.8.2 - Authenticated Access or Cross-Site Request Forgery leading to SQL Injection via orderby, order Parameters
MaxButtons < 1.26.1 - Reflected Cross-Site Scripting
I Recommend This < 3.7.3 - SQL Injection
MailPoet Newsletters (Previous) <= 2.6.10 - Cross-Site Request Forgery
MailPoet Newsletters <= 2.6.7 - Authorization Bypass
Konzept (Unkown Versions) - Arbitrary File Upload
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.