Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Reuters Direct <= 3.0.0 - Missing Authorization
MyD Delivery <= 1.3.7 - Unauthenticated Insecure Direct Object Reference
Post Snippets <= 4.0.11 - Cross-Site Request Forgery
Vireo <= 1.0.24 - Missing Authorization
Watcher for Elementor <= 1.0.9 - Missing Authorization
Dashboard Beacon <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Mergado Pack <= 4.2.0 - Cross-Site Request Forgery
Content Fetcher <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Gmail SMTP <= 1.0.7 - Cross-Site Request Forgery
Yolox <= 1.0.15 - Unauthenticated Local File Inclusion
BM Content Builder < 3.16.3.3 - Authenticated (Contributor+) Arbitrary File Download
Calendar.online / Kalender.digital <= 1.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
PartyMaker <= 1.1.15 - Unauthenticated Local File Inclusion
Export Categories & Taxonomies <= 1.0.3 - Missing Authorization
Direct Payments WP <= 1.3.0 - Missing Authorization
Maximum Products per User for WooCommerce <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Add Featured Image Custom Link <= 2.0.0 - Authenticated (Author+) Stored Cross-Site Scripting
Varnish/Nginx Proxy Caching <= 1.8.3 - Unauthenticated Information Exposure
Infility Global <= 2.15.36 - Unauthenticated SQL Injection
Questionar for Elementor <= 1.1.7 - Missing Authorization
Responsive Block Control <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Indoor Plants <= 1.2.7 - Unauthenticated Local File Inclusion
Easy Upload Files During Checkout <= 3.0.0 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.