Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryBetter Payment – Instant Payments, Donations, Fundraising with Subscriptions & More <= 2.2.0 - Unauthenticated Business Logic Flaw
Quiz And Survey Master <= 11.1.4 - Missing Authorization
Contact Form to Chat Apps | Click to Chat to Order – FormyChat <= 2.15.3 - Unauthenticated Stored Cross-Site Scripting
Noo JobMonster <= 4.8.5 - Reflected Cross-Site Scripting
Property Hive <= 2.2.3 - Unauthenticated Stored Cross-Site Scripting
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.2 - Reflected Cross-Site Scripting
aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder < 2.9.1 - Authenticated (Contributor+) Privilege Escalation
FunnelKit Funnel Builder Pro <= 3.15.0.7 - Unauthenticated Stored Cross-Site Scripting
PayU CommercePro < 3.9.0 - Missing Authorization
Visitor Traffic Real Time Statistics pro <= 11.9.1 - Reflected Cross-Site Scripting
Events Made Easy <= 3.1.1 - Unauthenticated Payment Bypass
Photo Swipe <= 4.1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting
Simple File List <= 6.3.8 - Reflected Cross-Site Scripting
Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials <= 3.1.15 - Authenticated (Administrator+) PHP Object Injection
WPFunnels <= 3.12.7 - Unauthenticated Remote Code Execution via 'postData' Parameter
Exclusive Addons for Elementor <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
RT-Theme 18 Responsive WordPress Theme <= 2.5 - Reflected Cross-Site Scripting
Sina Extension for Elementor <= 3.10.1 - Reflected Cross-Site Scripting
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.1 - Missing Authorization
FacturaONE <= 5.36 - Unauthenticated Remote Code Execution
Simply Schedule Appointments <= 1.6.12.3 - Unauthenticated Stored Cross-Site Scripting
MemberGlut <= 1.1.4 - Unauthenticated Privilege Escalation
Premium SEO - Malicious Plugin
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.