Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryAuto Login New User After Registration <= 1.9.6 - Cross-Site Request Forgery to Settings Modification
Ultimate Addons for WPBakery Page Builder <= 3.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Just Custom Fields <= 3.3.2 - Cross-Site Request Forgery on AJAX Actions
Grid Plus <= 1.3.4 - Reflected Cross-Site Scripting via grid_id
MW WP Form <= 4.4.5 - Missing Authorization
Ultimate Addons for WPBakery Page Builder <= 3.19.14 - Authenticated(Contributor+) Local File Inclusion
Motors – Car Dealer & Classified Ads <= 1.4.6 - Server Side Request Forgery
WC Captcha <= 1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Eonet Manual User Approve <= 2.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Delete Usermetas <= 1.1.2 - Cross-Site Request Forgery
Motors – Car Dealer & Classified Ads <= 1.4.6 - Reflected Cross-Site Scripting
Auto Login New User After Registration <= 1.9.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via alnuar_auto_login_new_user_after_registration_redirect
Novo-Map : your WP posts on custom google maps <= 1.1.2 - Cross-Site Request Forgery
Popup by Supsystic <= 1.10.19 - Missing Authorization to Sensitive Information Exposure
Booster for WooCommerce <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Social proof testimonials and reviews by Repuso <= 4.97 - Missing Authorization
Archivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scripting
Internal Link Building <= 1.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Team Showcase <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Headline Analyzer <= 1.3.1 - Missing Authorization via REST APIs
BetterLinks <= 1.6.0 - Improper Authorization to Data Import and Export
Internal Link Building <= 1.2.3 - Cross-Site Request Forgery
WhatsApp Share Button <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.