Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.540
Easy Digital Downloads – Per Product Emails < 1.0.9 - Cross-Site Scripting
WPtouch <= 3.7.5.3 - Cross-Site Scripting
Tune Library < 1.5.5 - SQL Injection
Easy EU Value Added (VAT) Taxes < 1.2.0 - Reflected Cross-Site Scripting
All In One WP Security & Firewall <= 3.9.4 - Reflected Cross-Site Scripting
PayPal Pro Add-on for iThemes Exchange < 1.1.0 - Cross-Site Scripting
Easy Digital Downloads (EDD) Twenty-Twelve < 1.1.1 - Cross-Site Scripting
Easy Digital Downloads – htaccess Editor < 1.0.1 - Reflected Cross-Site Scripting
iThemes Builder Depot Theme < 5.0.30 - Reflected Cross-Site Scripting
Easy Digital Downloads – Recommended Products <= 1.2.3.2 - Cross-Site Scripting
All in One SEO <= 2.2.6.1 - Reflected Cross-Site Scripting
Easy Digital Downloads – Simple Shipping <= 2.1.3 - Cross-Site Scripting
RD Download - 0.9.0 and below
Kunena - 3.0.7 and previous
TinyChat Room Spy <= 1.2.8 - Reflected Cross-Site Scripting
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configurati
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 1.4.95 - SQL Injection
WP-Mon <= 0.5.1 - Arbitrary File Download
Citizen Space <= 1.1 - Reflected Cross-Site Scripting
WordPress Content Slide <= 1.4.2 - Cross-Site Scripting
AJAX Store Locator <= 1.2 - SQL Injection
WP Statistics < 9.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
MiwoFTP < 1.0.6 - Cross-Site Request Forgery leading to Remote Code Execution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.