Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
PHPMailer Shell command injection
Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.
Malicious input can provoke XSS when preserving comments
Vyper's external calls can overflow return data to return input buffer
Central Dogma Authentication Bypass Vulnerability via Session Leakage
Dash apps vulnerable to Cross-site Scripting
Beetl Server-Side Template Injection vulnerability
JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing
SP Project & Document Manager <= 4.69 - Authenticated (Contributor+) SQL Injection via Shortcode
Premium Addons for Elementor <= 4.10.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Anonymous Restricted Content <= 1.6.2 - Protection Mechanism Bypass
WP Visitor Statistics (Real Time Traffic) <= 6.9.4 - Sensitive Information Exposure via Log File
GDPR Data Request Form <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
PowerPack Pro for Elementor < 2.10.8 - Cross-Site Request Forgery to Plugin Settings Modification and Cross-Site Scripting
Quicksand Post Filter jQuery Plugin <= 3.1.1 - Missing Authorization via quicksand_admin_ajax
Scroll Triggered Box <= 2.3 - Authenticated (Editor+) Stored Cross-Site Scripting
PT Sign Ups <= 1.0.4 - Unauthenticated Stored Cross-Site Scripting
Post Thumbnail Editor <= 2.4.8 - Sensitive Information Exposure
LearnDash LMS <= 4.10.2 - Sensitive Information Exposure via API
Biteship <= 2.2.24 - Reflected Cross-Site Scripting via biteship_error and biteship_message
Structured Content <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Classic Editor Shortcode
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.1 - Missing Authorization
PDF Flipbook, 3D Flipbook – DearFlip <= 2.2.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.