Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
drupal/baguettebox - SA-CONTRIB-2025-034
Permission policy information leakage in Backstage permission system
Unregistered users can see "public" messages from a closed wiki via notifications from a different wiki
Html5 Audio Player <= 2.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
Logo Carousel Slider <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Right Click Disable OR Ban <= 1.1.17 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Flipclock <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Modal Survey <= 2.0.2.0.1 - Unauthenticated Local File Inclusion
WP Data Access <= 5.5.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Listdom <= 4.0.0 - Open Redirect
Checkout for PayPal <= 1.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting
Asgaros Forum <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
MelaPress Login Security <= 2.1.0 - Authenticated (Administrator+) PHP Object Injection
WooCommerce Product Table Lite <= 3.9.5 - Missing Authorization
Scriptless Social Sharing <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Church Admin <= 5.0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Themify Shortcodes <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Tools <= 5.18 - Cross-Site Request Forgery to Arbitrary File Renaming
WowStore <= 4.2.4 - Missing Authorization
Live Forms <= 4.8.4 - Missing Authorization
Most And Least Read Posts Widget <= 2.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fast eBay Listings <= 2.12.15 - Open Redirect
Mediavine Control Panel <= 2.10.6 - Unauthenticated Information Exposure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.