Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 593
Greenshift Query and Meta Addon < 3.9.2 - Authenticated (Subscriber+) SQL Injection
Collapsing Archives <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
SKT Blocks – Gutenberg based Page Builder <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
YARPP <= 5.30.10 - Missing Authorization
Droip < 2.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Settings Change
Zynith SEO <= 7.4.9 - Missing Authorization to Unauthenticated Arbitrary Option Deletion
The Plus Addons for Elementor Page Builder Lite <= 5.6.2 - Missing Authorization
Responsive Lightbox <= 2.4.7 - Missing Authorization
Beaver Builder <= 2.8.3.2 - Reflected Cross-Site Scripting
Timetics <= 1.0.23 - Authorization Bypass
Memberpress <= 1.11.34 - Missing Authorization
YellowPencil Visual CSS Style Editor <= 7.6.1 - Reflected Cross-Site Scripting
WP Armour Extended <= 1.26 - Cross-Site Request Forgery
Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More <= 1.1.2 - Cross-Site Request Forgery
Esotera <= 1.2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPMobile.App <= 11.48 - Reflected Cross-Site Scripting
Magic Post Thumbnail <= 5.2.9 - Reflected Cross-Site Scripting
Envira Photo Gallery <= 1.8.14 - Missing Authorization
Propovoice Pro <= 1.7.0.3 - Unauthenticated SQL Injection
Delicious Recipes – WordPress Recipe Plugin <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
EmbedPress <= 4.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Brickscore <= 1.4.2.5 - Unauthenticated Stored Cross-Site Scripting
Web and WooCommerce Addons for WPBakery Builder <= 1.4.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.