Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.543
TheCartPress eCommerce Shopping Cart <= 1.5.3.6 - Multiple Cross-Site Scripting
rtMedia for WordPress, BuddyPress and bbPress < 3.7.40 - SQL Injection
Link Log – external link click monitor <= 1.4 - HTTP Response Splitting
Exquisite - Ultimate Newspaper Theme <= 1.3.3 - Cross-Site Scripting
WordPress Core < 4.2.1 - Cross-Site Scripting via Comments
WPS Hide Login <= 1.0 - Cross-Site Request Forgery
WP Ultimate CSV Importer <= 3.7 - Arbitrary File Read
Resend Welcome Email <= 1.0.1 - Reflected Cross-Site Scripting
FeedWordPress < 2015.0426 - Cross-Site Scripting
"J-ClassifiedsManager" by CMSjunkie
WooCommerce Amazon Affiliates < 9.0.2.16 - Unauthenticated Arbitrary File Upload
Social Media Share Buttons | MashShare < 2.3.1 - Information Disclosure
The7 — Website and eCommerce Builder for WordPress <= 2.1.0 - Reflected Cross-Site Scripting
WP Google Map Plugin < 2.3.7 - Reflected Cross-Site Scripting
QAEngine <= 1.4 - Privilege Escalation
"Simple Email Form" by unlikelysource.com - 1.8.5 and below
WooSidebars <= 1.4.1 - Reflected Cross-Site Scripting
Mark User as Spammer <= 1.0.1 - Reflected Cross-Site Scripting
Add Link to Facebook <= 1.215 - Authenticated Stored Cross-Site Scripting
Ultimate Product Catalog < 4.2.22 - Arbitrary File Upload
Option Tree <= 2.5.3 - Cross-Site Scripting
WooFramework Branding <= 1.0.1 - Reflected Cross-Site Scripting
CM Tooltip Glossary – Better SEO and UEX for your WP site <= 3.1.3 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.