Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.631
The WP Remote WordPress Plugin <= 4.64 - Reflected Cross-Site Scripting
CorreosExpress <= 2.6.0 - Sensitive Data Exposure
Contact Form & Lead Form Elementor Builder <= 1.6.3 - Unauthenticated Stored Cross-Site Scripting
WP RSS Aggregator <= 4.19.2 - Subscriber+ Stored Cross-Site Scripting
Asgaros Forums <= 1.15.13 - Authenticated Stored Cross-Site Scripting
Stetic <= 1.0.6 Cross-Site Request Forgery to Stored Cross-Site Scripting
Rich Reviews by Starfish <= 1.9.5 - SQL Injection
Buttonizer - Smart Floating Action Button <= 2.5.4 - Admin+ Stored Cross-Site Scripting
MOLIE <= 0.5 - SQL Injection
NextScripts: Social Networks Auto-Poster <= 4.3.20 - Reflected Cross-Site Scripting
Improper Neutralization of Formula Elements in a CSV File in html-2-csv
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.0.6 - Reflected Cross-Site Scripting
EC-CUBE Improper access control in Management screen
Browser and Operating System Finder <= 1.1 - Cross-Site Request Forgery
Improper certificate management in AWS IoT Device SDK v2
Improper certificate management in AWS IoT Device SDK v2
Improper certificate management in AWS IoT Device SDK v2
CSV Injection in symfony/serializer
Improper certificate management in AWS IoT Device SDK v2
Cookie persistence after password changes in symfony/security-bundle
Webcache Poisoning in shopware/platform and shopware/core
Webcache Poisoning in symfony/http-kernel
Hide My WP <= 6.2.3 - Authorization Bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.