Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.681
Restablecer filtrostarteaucitron.js – Cookies legislation & GDPR (WordPress plugin) <= 1.6 - Cross-Site Scripting
tarteaucitron.js – Cookies legislation & GDPR <= 1.5.4 - Cross-Site Request Forgery to Cross-Site Scripting
Stars Rating <= 3.5.0 - Denial of Service
Rich Reviews by Starfish <= 1.9.5 - SQL Injection
ProfilePress <= 3.2.2 - Reflected Cross-Site Scripting via ppress_cc_data Parameter
ProfilePress <= 3.2.2 - Reflected Cross-Site Scripting
Easy Digital Downloads <= 2.11.2 - Reflected Cross-Site Scripting
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.11.2 - Reflected Cross-Site Scripting
Simple Download Monitor <= 3.9.4 - Reflected Cross-Site Scripting
WP-Recall <= 16.24.47 - Reflected Cross-Site Scripting
Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 - Missing Authorization to Stored Cross-Site Scripting
YITH Maintenance Mode <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting
One User Avatar <= 2.3.6 - Stored Cross-Site Scripting
One User Avatar <= 2.3.6 - Cross-Site Request Forgery
Zoho CRM Lead Magnet <= 1.7.2.4 - Cross-Site Scripting
Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.1.7 - Cross-Site Scripting
Contact Form Entries – Contact Form 7, WPforms and more <= 1.2.0 - Reflected Cross-Site Scripting
Titan Framework <= (Various Versions) - Reflected Cross-Site Scripting
Paid Membership, User Registration, User Profile & Restrict Content Plugin – ProfilePress <= 3.1.10 - Unauthenticated Cross-Site Scripting
WP Fusion Lite <= 3.37.18 – Reflected Cross-Site Scripting
YouTube Embed <= 5.2.1 - Contributor+ Stored Cross-Site Scripting
Calendar Event Multi View <= 1.3.99 - Reflected Cross-Site Scripting
WooCommerce Blocks < 5.5 - Authenticated Blind SQL Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.