Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryVG WooCarousel <= 1.3 - Authenticated (Contributor+) Local File Inclusion
DyaPress ERP/CRM <= 18.0.2.0 - Unauthenticated Local File Inclusion
Arkhe Blocks <= 2.27.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Real Estate Manager <= 7.3 - Authenticated (Contributor+) Local File Inclusion
Social Share Buttons & Analytics Plugin – GetSocial.io <= 4.5 - Missing Authorization
Ai Image Alt Text Generator for WP <= 1.1.1 - Missing Authorization
AI Content Creator <= 1.2.6 - Cross-Site Request Forgery
aThemes Addons for Elementor <= 1.1.3 - Authenticated (Contributor+) Local File Inclusion
Pay with Contact Form 7 <= 1.0.4 - Authenticated (Administrator+) SQL Injection
Advanced Woo Labels <= 2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Banner <= 3.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site Scripting
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.8.9.1 - Unauthenticated Limited Local File Inclusion
TagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object Instantiation
Product Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend Parameter
Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload
Category Icon <= 1.0.1 - Authenticated (Author+) Arbitrary File Download
include-file <= 1 - Authenticated (Contributor+) Arbitrary File Download
Small Package Quotes – Worldwide Express Edition <= 5.2.19 - Missing Authorization
Booking Calendar and Notification <= 4.0.3 - Authentication Bypass
Team Builder <= 1.3 - Reflected Cross-Site Scripting
Publitio <= 2.2.1 - Authenticated (Contributor+) Arbitrary File Read
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.