Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryPopup Box – Best WordPress Popup Plugin <= 3.7.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Seraphinite Accelerator <= 2.20.28 - Reflected Cross-Site Scripting via 'rt'
Seraphinite Accelerator <= 2.20.28 - Arbitrary Redirect via 'redir'
Magic Embeds <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.27.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Article Analytics <= 1.0 - Unauthenticated SQL Injection
WP Post Popup <= 3.7.3 - Authenticated (Admin+) Stored Cross-Site Scripting
PubyDoc <= 2.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Auto Excerpt everywhere <= 1.5 - Cross-Site Request Forgery
WooHoo Newspaper Magazine Theme <= 2.5.3 - Cross-Site Request Forgery to Settings Update
Bonus for Woo <= 5.8.2 - Reflected Cross-Site Scripting
myStickymenu <= 2.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Lead Deletion
Auto Limit Posts Reloaded <= 2.5 - Cross-Site Request Forgery
Neon text <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Pre-Orders for WooCommerce <= 1.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Alter <= 1.0 - Cross-Site Request Forgery
Thumbnail Slider With Lightbox <= 1.0 - Cross-Site Request Forgery to Arbitrary File Upload
Current Menu Item for Custom Post Types <= 1.5 - Cross-Site Request Forgery
WP Hotel Booking <= 2.0.7 - Unauthenticated SQL Injection
Thumbnail carousel slider <= 1.0 - Cross-Site Request Forgery to Mass Slider Deletion
LogDash Activity Log <= 1.1.3 - Unauthenticated SQL Injection
Feather Login Page <= 1.1.3 - Cross-Site Request Forgery
WP Knowledgebase <= 1.3.4 - Cross-Site Request Forgery
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.