Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 498
Wyczyść filtryMyHome Core <= 4.1.0 - Unauthenticated Local File Inclusion
Nelio AB Testing <= 8.1.8 - Authenticated (Editor+) Remote Code Execution
Frontis Blocks <= 1.1.5 - Unauthenticated Server-Side Request Forgery
AdForest <= 6.0.11 - Unauthenticated Local File Inclusion
Xpro Elementor Addons <= 1.4.19.1 - Authenticated (Author+) Arbitrary File Upload
Werkstatt < 4.8.3 - Unauthenticated Local File Inclusion
Spin Wheel <= 2.1.0 - Unauthenticated Client-Side Prize Manipulation via 'prize_index' Parameter
Gutenberg Thim Blocks <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read via 'iconSVG' Parameter
Church Admin <= 5.0.28 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' Parameter
Payment Button for PayPal <= 1.2.3.41 - Missing Authorization to Unauthenticated Arbitrary Order Creation
Feeds for YouTube Pro <= 2.6.0 - Unauthenticated Arbitrary File Read via Path Traversal
Quick Contact Form <= 8.2.6 - Unauthenticated Open Mail Relay
Post Slides <= 1.0.1 - Authenticated (Contributor+) Local File Inclusion
The Aisle < 2.9.1 - Unauthenticated Local File Inclusion
Powerlift < 3.2.1 - Unauthenticated Local File Inclusion
DK PDF – WordPress PDF Generator <= 2.3.0 - Authenticated (Author+) Server-Side Request Forgery
All-in-One Video Gallery <= 4.5.7 - Authenticated (Author+) Arbitrary File Upload via VTT Upload Bypass
Supreme Modules Lite <= 2.5.62 - Authenticated (Author+) Arbitrary File Upload via JSON Upload Bypass
Kalium <= 3.29 - Missing Authorization to Unauthenticated Mail Relay via kalium_vc_contact_form_request
g-FFL Checkout <= 2.1.0 - Unauthenticated Arbitrary File Upload
Woocommerce Book Price <= 1.3 - Authenticated (Subscriber++) Arbitrary File Download
Biagiotti < 3.5.2 - Unauthenticated Local File Inclusion
North <= 5.7.5 - Unauthenticated Local File Inclusion
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.