Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryCouponXxL Custom Post Types <= 3.0 - Unauthenticated Privilege Escalation
Click & Pledge Connect <= 25.04010101-WP6.8 - Unauthenticated SQL Injection to Privilege Escalation
Networker <= 1.2.0 - Unauthenticated Local File Inclusion
CouponXxL <= 3.0.0 - Unauthenticated PHP Object Injection
Masteriyo LMS PRO <= 2.20.0 - Unauthenticated Privilege Escalation
Kossy - Minimalist eCommerce WordPress Theme <= 1.45 - Unauthenticated Local File Inclusion
Elessi < 6.4.1 - Authenticated (Subscriber+) Local File Inclusion
CMSMasters Content Composer < 2.5.7 - Unauthenticated Local File Inclusion
Backwp <= 2.0.2 - Reflected Cross-Site Scripting
Alone <= 7.8.2 - Unauthenticated Remote Code Execution
Gutenberg Blocks <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
PrivateContent - Mail Actions <= 2.3.2 - Unauthenticated Local File Inclusion
Lead Form Data Collection to CRM <= 3.1 - Missing Authorization to Authenticated (Subscriber+) Many Actions
Amwerk <= 1.2.0 - Unauthenticated PHP Object Injection
Beautiful Cookie Consent Banner <= 4.6.1 - Reflected Cross-Site Scripting
Video List Manager <= 1.7 - Unauthenticated SQL Injection
Custom Login And Signup Widget <= 1.0 - Authenticated (Administrator+) Remote Code Execution
Diza <= 1.3.9 - Unauthenticated Local File Inclusion
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.3.65 - DOM-Based Reflected Cross-Site Scripting via 'pdf-source'
Ultra Addons for Contact Form 7 <= 3.5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode
Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user'
Aviation Weather from NOAA <= 0.7.2 - Authenticated (Subscriber+) Arbitrary File Deletion
FW Gallery <= 8.0.0 - Unauthenticated Arbitrary File Upload
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.