Crítica
CVE-2015-2065
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.534
Alta
CVE-2014-6412
WordPress Core < 4.4 - Brute Force Password Recovery Tokens
Crítica
CVE-2015-10099
CP Appointment Calendar <= 1.1.5 - Unauthenticated SQL Injection
Media
CVE-2015-1581
Mobile Domain <= 1.5.2 - Cross-Site Request Forgery and Stored Cross-Site Scripting
Media
CVE-2015-9332
WordPress Uninstall <= 1.2.1 - Cross-Site Request Forgery to Site Reset
Media
CVE-2015-1436
Easing Slider <= 2.2.0.6 - Cross-Site Scripting
Crítica
fa2bc3ae-1162-496b-8bc3-5bee1c0ff702
Cherry Plugin < 1.2.7 - Arbitrary File Upload
Alta
b94facce-975f-4080-ad67-95d282b28d0d
WPBakery Page Builder for WordPress (formerly Visual Composer) <= 4.7.3 - Multiple Cross-Site Scripting Issues
Alta
e92cc6a3-062c-4f0e-9539-07d0fa0e9404
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin < 1.4.36 - SQL Injection
Crítica
6bf743b1-5a59-4e22-8c59-3c17b2646ec8
Store Locator < 3.34 - SQL Injection
Alta
CVE-2015-1580
Redirection Page <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting
Alta
CVE-2015-2089
CrossSlide jQuery Plugin <= 2.0.5 - Multiple Cross-Site Request Forgery to Stored Cross-Site Scripting
Alta
CVE-2015-10139
WPLMS Learning Management System for WordPress, WordPress LMS <= 1.8.4.1 - Privilege Escalation
Alta
f795a46c-ba0c-45d5-9ff7-638752f1681b
User Meta Manager < 3.4.7 - Authenticated Blind SQL Injection
Media
CVE-2015-1494
FancyBox for WordPress <= 3.0.2 - Stored Cross-Site Scripting
Crítica
c75bfba9-b25a-4966-835c-8d22736de809
UpdraftPlus WordPress Backup Plugin <= 1.9.50 - Nonce Leak to Authorization Bypass
Media
CVE-2015-10094
Fastly <= 0.97 - Reflected Cross-Site Scripting
Alta
bb1742fd-7f0c-4a14-aa9c-f2863fcccd17
Revive Old Posts – Social Media Auto Post and Scheduling Plugin < 8.0.0 - Authorization Bypass
Media
CVE-2015-9350
Feed Them Social <= 1.6.9 - Reflected Cross-Site Scripting
Alta
86566819-ec2e-4d56-87f6-4cd4b6de6192
Quasar - WordPress Theme with Animation Builder <= 1.9.2 - Authorization Bypass
Alta
CVE-2015-10124
Most Popular Posts Widget <= 0.8 - Authenticated (Admin+) SQL Injection
Crítica
CVE-2015-9351
Feed Them Social <= 1.6.9 - Arbitrary Shortcode Execution
Media
47c2bf75-fba1-4c37-b33a-f5e0e093fb78
SpiderVPlayer< 1.5.5 - Reflected Cross-Site Scripting
Alta
346a49ff-4e61-466b-b1fe-98cf5766accb
WordPress Calls to Action < 2.2.8 - Unauthenticated Stored Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.