Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.602
Post Category Image With Grid and Slider <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
FL3R FeelBox <= 8.1 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
List Pages Shortcode <= 1.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Restaurant Menu – Food Ordering System – Table Reservation <= 2.3.5 - Authenticated (Contributor+) Cross-Site Scripting
Video.js – HTML5 Video Player for WordPress <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
JetWidgets for Elementor <= 1.0.12 - Cross-Site Request Forgery to Settings Update
WordPress RSS Feed Retriever <= 1.6.7 - Missing Authorization
FL3R FeelBox <= 8.1 - Cross-Site Request Forgery leading to Plugin Settings Reset
MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
WooCommerce Chained Products < 2.12.0 - Missing Authorization to Arbitrary Options Update
Twitter Cards Meta <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Social Sharing Toolkit <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Blog Designer - Post and Widget <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Logaster Logo Generator <= 1.3 - Missing Authorization to Arbitrary Media Deletion and Creation
Revive Old Posts <= 9.0.10 - Authenticated (Admin+) PHP Object Injection
WordPress RSS Feed Retriever <= 1.6.7 - Cross-Site Request Forgery
Video Sidebar Widgets <= 6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Themify Shortcodes <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
My YouTube Channel <= 3.0.12.1 - Missing Authorization
My Tickets <= 1.9.10 - Cross-Site Request Forgery
GigPress <= 2.3.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Embed PDF <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Membership For WooCommerce <= 2.1.6 - Unauthenticated Arbitrary File Upload
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.