Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryTransFinanz <= 1.0.0 - Reflected Cross-Site Scripting
iBuildApp <= 0.2.0 - Reflected Cross-Site Scripting
User Management <= 1.1 - Authenticated (Subscriber+) Privilege Escalation
BuddyBoss Platform < 2.7.60 - Insecure Direct Object Reference to Private Post Comment Exposure
WpTravelly <= 1.8.5 - Missing Authorization
Zarinpal Paid Download <= 2.3 - Reflected Cross-Site Scripting
Contact Form 7 Redirect & Thank You Page <= 1.0.7 - Reflected Cross-Site Scripting
NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update
Better WishList API <= 1.1.3 - Unauthenticated Stored Cross-Site Scripting
Multifox <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
SetMore Theme – Custom Post Types <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
HireHive Job Plugin <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Posts Footer Manager <= 2.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Order By <= 1.4.2 - Reflected Cross-Site Scripting
Nativery <= 0.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Tag Groups is the Advanced Way to Display Your Taxonomy Terms <= 2.0.4 - Reflected Cross-Site Scripting
Htaccess File Editor <= 1.0.19 - Unauthenticated Information Exposure
Mapbox for WP Advanced <= 1.0.0 - Reflected Cross-Site Scripting
Eazy Under Construction <= 1.0 - Reflected Cross-Site Scripting
Elementor AI Addons <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP ViewSTL <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup
Product Carousel For WooCommerce – WoorouSell <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.