Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 8.950
Restablecer filtrosContact Form Email <= 1.2.65 - Cross-Site Scripting
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authorization
WP SVG Icons <= 3.2.2 - Cross-Site Request Forgery to Remote Code Execution
Contact Form & SMTP Plugin by PirateForms <= 2.5.1 - Unauthenticated HTML injection
WPS Cleaner <= 1.4.4 - Arbitrary Media File Disclosure
Email Subscribers & Newsletters <= 4.1.7 - SQL Injection
OneSignal Web Push Notifications <=1.17.7 - Stored Cross-Site Scripting
Contact Form, Drag and Drop Form Builder for WordPress – Everest Forms <= 1.4.9 - SQL Injection
Coming Soon Page & Maintenance Mode <= 1.8.1 - Unauthenticated Settings Reset
Coming Soon Page & Maintenance Mode <= 1.8.1 - Stored Cross Site Scripting
Email Subscribers & Newsletters <= 4.1.6 - Cross-Site Scripting
Appointment Hour Booking – WordPress Booking Plugin <= 1.1.45 - Cross-Site Scripting
Simple Link Directory < 7.3.5 - Reflected Cross-Site Scripting
Yoast SEO <= 11.5 - Authenticated Stored Cross Site Scripting
WP Like Button <= 1.6.0 - Missing Authorization
Simple Mail Address Encoder < 1.7 - Reflected Cross-Site Scripting
Easy Forms for Mailchimp <= 6.5.2 - Code Injection
WebP Converter for Media – Convert WebP and AVIF & Optimize Images <= 1.0.2 - Cross-Site Request Forgery
WP LiveChat <= 3.7.3 - Stored Cross-Site Scripting
Google Adsense & Banner Ads by AdsforWP <= 1.8 - Cross-Site Request Forgery
Custom 404 Pro <= 3.2.8 - Reflected Cross-Site Scripting
Rank Math SEO <= 1.0.27 - Authenticated Settings Reset via reset-cmb Parameter
Rank Math SEO <= 1.0.26 - Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.