Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryFront End Users <= 3.2.32 - Authenticated (Admin+) SQL injection
Gift Certificate Creator <= 1.1.0 - Reflected Cross-Site Scripting via receip_address Parameter
Demo Awesome <= 1.0.3 - Missing Authorization to Authenticated (Subscriber+) Plugin Activation
Video Url <= 1.0.0.3 - Reflected Cross-Site Scripting
wp Time Machine <= 3.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Advanced Search by My Solr Server <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Shopper Approved Reviews 2.0 - 2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Smart Icons For WordPress <= 1.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Insert Headers and Footers Code – HT Script <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
WP Clone any post type <= 3.6 - Missing Authorization
Arrow Custom Feed for Twitter <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Zoho Flow <= 2.13.3 - Missing Authorization
The Logo Slider <= 1.0.0 - Reflected Cross-Site Scripting
NanoSupport <= 0.6.0 - Reflected Cross-Site Scripting
JobBoard Job listing <= 1.2.7 - Authenticated (Employer+) Insecure Direct Object Reference
ShopCred <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
OwnerRez <= 1.2.0 - Cross-Site Request Forgery
Secure Copy Content Protection and Content Locking <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting
Google SEO Pressor Snippet <= 2.0 - Cross-Site Request Forgery
Cue <= 2.4.4 - Missing Authorization
Gift Cards for WooCommerce <= 1.5.8 - Missing Authorization
Boo Recipes <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Cleaner <= 1.1.5 - Reflected Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.