Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 4.073
Restablecer filtrosFile Manager 7.2.2 - 8.0.4 - Unauthenticated Information Exposure
Review Slider Pro <= 12.7.11 - Authenticated (Subscriber+) SQL Injection
Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing <= 1.69.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Authenticated (Subscriber+) Information Exposure
MCP Server for WordPress <= 1.8.1 - Authenticated (Contributor+) Information Exposure
Spectra Legacy – Gutenberg Blocks <= 2.20.0 - Authenticated (Contributor+) Sensitive Information Exposure
W4 Post List <= 3.0.6 - Authenticated (Editor+) SQL Injection
Tainacan <= 1.2.0 - Authenticated (Subscriber+) SQL Injection
Email Log <= 2.63 - Authenticated (Administrator+) SQL Injection
Ultimeter – the Ultimate Progress and Goals Meter <= 3.0.8 - Authenticated (Editor+) SQL Injection
Shopping Cart & eCommerce Store <= 5.9.4 - Authenticated (Contributor+) SQL Injection
Mollie Forms <= 2.11.0 - Authenticated (Contributor+) SQL Injection
Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator <= 1.5.10 - Authenticated (Contributor+) SQL Injection
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.7.0 - Authenticated (Shop Manager+) SQL Injection
Product Filter for WooCommerce by WBW <= 3.1.7 - Unauthenticated SQL Injection
Bluff Post <= 1.1.1 - Unauthenticated SQL Injection
Simple Discount Rules for Woocommerce <= 5.18 - Authenticated (Administrator+) SQL Injection
Estatik Real Estate Plugin <= 4.3.5 - Authenticated (Administrator+) SQL Injection
Admin Notices Manager <= 1.6.0 - Authenticated (Administrator+) SQL Injection
Team Showcase Supreme <= 9.2 - Unauthenticated Information Exposure
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.9 - Authenticated (Author+) SQL Injection
Rename wp-login.php to anything you want <= 2.0.1 - Unauthenticated SQL Injection via 'log' (Username) Parameter
Masteriyo LMS <= 3.4.1 - Authenticated (Subscriber+) Information Exposure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.