Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 534
Pods - Custom Content Types and Fields - Missing Authorization
Sliced Invoices <= 3.9.2 - Missing Authorization
Easy Appointments <= 3.11.18 - Insufficient Authorization
Creative Image Slider – Responsive Slider Plugin <= 2.1.3 - Reflected Cross-Site Scripting
YITH WooCommerce Account Funds Premium <= 1.33.0 - Missing Authorization
GamiPress <= 6.8.5 - Cross-Site Request Forgery
All In One Redirection <= 2.2.0 - Reflected Cross-Site Scripting
Limit Attempts by BestWebSoft <= 1.2.9 - Reflected Cross-Site Scripting
ProfileGrid <= 5.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Elementor Addon Elements <= 1.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Brave Popup Builder <= 0.6.5 - Unauthenticated Server-Side Request Forgery
Beaver Builder <= 2.7.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Pocket News Generator <= 0.2.0 - Cross-Site Request Forgery to Settings Update
JCH Optimize <= 4.0.0 - Missing Authorization
Easy Appointments <= 3.11.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
B Slider - Slider for your block editor <= 1.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Landing Page Builder <= 1.5.1.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Themify Event Post <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Church Admin <= 4.1.18 - Missing Authorization
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting
ProfileGrid <= 5.7.8 - Authenticated (Subscriber+) SQL Injection
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.