Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 602
Pie Register Premium < 3.8.3.3 - Unauthenticated Cross-Site Scripting
AIO Contact <= 2.8.1 - Unauthenticated Stored Cross-Site Scripting
WP Mailster <= 1.8.16.0 - Unauthenticated Information Exposure
The Plus Addons for Elementor Page Builder Lite <= 5.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Goodlayers Core <= 2.0.7 - Reflected Cross-Site Scripting via 'font-family'
Simple User Registration <= 5.5 - Missing Authorization to User Deletion
Captivate Sync <= 2.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
ARForms <= 6.4.1 - Missing Authorization to Plugin Settings Change
WDesignkit <= 1.0.40 - Authenticated (Administrator+) Arbitrary File Upload
WP Project Manager <= 2.6.31 - Authenticated (Project Manager+) SQL Injection
FAT Services Booking <= 5.6 - Unauthenticated SQL Injection
Analytify <= 5.4.3 - Missing Authorization
Magical Addons For Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Awesome Shortcodes <= 1.7.2 - Reflected Cross-Site Scripting
FAT Services Booking <= 5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
PostX <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Z-Downloads <= 1.11.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
WordPress Auction Plugin <= 3.7 - Unauthenticated SQL Injection
WP Mailster <= 1.8.16.0 - Authenticated (Contributor+) SQL Injection via orderby
Filebird <= 6.3.2 - Missing Authorization
Themesflat Addons For Elementor <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Church Admin <= 5.0.8 - Missing Authorization
WP Mailster <= 1.8.16.0 - Missing Authorization
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.