Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.533
weForms <= 1.6.20 - Missing Authorization
Booking Package <= 1.6.27 - Unauthenticated Price Manipulation
collectchat <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mang Board WP <= 1.8.0 - Reflected Cross-Site Scripting
WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection
Essential Blocks for Gutenberg <= 4.4.9 - Missing Authorization
Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Revisions Delete <= 1.5.3 - Cross-Site Request Forgery
WordPress Page Builder – Zion Builder <= 3.6.9 - Authenticated (Editor+) Stored Cross-Site Scripting
Spiffy Calendar <= 4.9.7 - Reflected Cross-Site Scripting
WC Marketplace <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Hotel Booking <= 2.0.9.2 - Missing Authorization
Lordicon Animated Icons <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Church Admin <= 4.1.7 - Cross-Site Request Forgery
Klarna Payments for WooCommerce <= 3.2.4 - Missing Authorization
Christmas Greetings <= 1.2.5 - Reflected Cross-Site Scripting
Booking Activities <= 1.15.19 - Reflected Cross-Site Scripting
Paid Memberships Pro – Mailchimp Add On <= 2.3.4 - Unauthenticated Information Disclosure
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Cross-Site Request Forgery to Publicly Accessible Form Submission Export
News Wall <= 1.1.0 - Cross-Site Request Forgery to Plugin Settings Update
Fluent CRM <= 2.8.44 - Authenticated (Administrator+) Stored Cross-Site Scripting
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.1 - Cross-Site Request Forgery
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.