Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.587
Email Address Encoder 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) Arbitrary File Read
Currency Converter Calculator <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Accelerated Mobile Pages <= 1.0.88.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
LadiApp <= 4.3 - Missing Authorization
Multiple Post Passwords <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Business Directory Plugin <= 6.3.10 - Cross-Site Request Forgery
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization
BSK Forms Blacklist <= 3.6.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Formzu WP <= 1.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id
Product Size Chart For WooCommerce <= 1.1.5 - Cross-Site Request Forgery via get_save_option
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action
Button Generator – easily Button Builder <= 2.3.8 - Missing Authorization
Aruba HiSpeed Cache <= 2.0.6 - Sensitive Information Exposure via Log File
Media File Renamer <= 5.6.9 - Sensitive Information Exposure via Log File
MkRapel Regiones y Ciudades de Chile para WC <= 4.3.0 - Cross-Site Request Forgery via multiple functions
Quantity Plus Minus Button for WooCommerce by CodeAstrology <= 1.1.9 - Cross-Site Request Forgery via wqpmb_form_submit
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL injection via key
WP Forms Puzzle Captcha <= 4.1 - Captcha Bypass
IdeaPush <= 8.57 - Missing Authorization
WP Cleanfix <= 5.6.2 - Missing Authorization via register
WP Catalogue <= 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
WooCommerce Login Redirect <= 2.2.4 - Cross-Site Request Forgery
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.