Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.593
Editorialmag <= 1.2.0 - Missing Authorization to Authenticated Plugin Activation
Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorization
Creative Gallery - SQL Injection
Exposure of Private Personal Information to an Unauthorized Actor in SC Quick Accounting module for PrestaShop
Ghost vulnerable to information disclosure of private API fields
engine.io Uncaught Exception vulnerability
Command injection in OpenTSDB
Cross Site Scripting in OpenTSDB
drupal/s3fs - SA-CONTRIB-2023-014
CM Pop-Up banners <= 1.5.10 - Authenticated (Subscriber+) SQL Injection via getStatistics
Albo Pretorio Online <= 4.6.3 - Reflected Cross-Site Scripting
Contact Form 7 extension for Google Map fields <= 1.8.3 - Stored Cross-Site Scripting
Photo Gallery by Ays <= 5.1.3 - Reflected Cross-Site Scripting via ays_gpg_settings_tab
JupiterX Theme <= 3.0.0 - Authenticated Local File Inclusion via print_pane
TP Education <= 4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcodes
Albo Pretorio Online <= 4.6.3 - Reflected Cross-Site Scripting
Library Viewer <= 2.0.6 - Open Redirect via 'redirect_to'
Participants Database <= 2.4.9 - Cross-Site Request Forgery via _process_general
Participants Database <= 2.4.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings
WOLF <= 1.0.6 - Cross-Site Request Forgery via wpbe_update_page_field
FV Flowplayer Video Player <= 7.5.32.7212 - Reflected Cross-Site Scripting via id
Library Viewer <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
OSM - OpenStreetMap <= 6.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via 'osm_map' Shortcode
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.