Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.593
Sketchfab Embed <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Empty Cart Button for WooCommerce <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
SP Project & Document Manager <= 4.71 - Authenticated (Subscriber+) Directory Traversal
ContentLock <= 1.0.3 - Cross-Site Request Forgery to Settings Update
Watu Quiz <= 3.4.1.1 - Authenticated (Author+) Stored Cross-Site Scripting
Newsletters <= 4.9.7 - Cross-Site Request Forgery
Swift Framework < 2024.04.30 Authenticated (Contributor+) Stored Cross-Site Scripting via Caption Title
SiteGuard WP Plugin <= 1.7.6 - Login Page Disclosure
Swift Framework < 2024.04.30 Authenticated (Admin+) Stored Cross-Site Scripting via Auth
ARMember Premium <= 6.7 - Cross-Site Request Forgery via multiple functions
Quotes and Tips by BestWebSoft <= 1.44 - Authenticated (Admin+) Arbitrary File Upload
ContentLock <= 1.0.3 - Cross-Site Request Forgery to Email Adding
Page Builder Sandwich – Front-End Page Builder <= 5.1.0 - Missing Authorization
Academy LMS <= 2.0.10 - Open Redirect
Restaurant Reservations <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgets
Website Content in Page or Post <= 2024.03.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Optinly <= 1.0.18 - Missing Authorization
Social Media Widget <= 4.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting
ContentLock <= 1.0.3 - Cross-Site Request Forgery to Group/Email Deletion
Strapi Server-Side Request Forgery (SSRF)
Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter
Appointment Booking and Online Scheduling <= 4.4.2 - Reflected Cross-Site Scripting
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.