Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 532
Booking Package <= 1.6.27 - Unauthenticated Price Manipulation
collectchat <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mang Board WP <= 1.8.0 - Reflected Cross-Site Scripting
WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection
Essential Blocks for Gutenberg <= 4.4.9 - Missing Authorization
Lightbox slider – Responsive Lightbox Gallery <= 1.9.9 - Authenticated (Contributor+) PHP Object Injection
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Revisions Delete <= 1.5.3 - Cross-Site Request Forgery
WordPress Page Builder – Zion Builder <= 3.6.9 - Authenticated (Editor+) Stored Cross-Site Scripting
Spiffy Calendar <= 4.9.7 - Reflected Cross-Site Scripting
WC Marketplace <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Hotel Booking <= 2.0.9.2 - Missing Authorization
Lordicon Animated Icons <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Church Admin <= 4.1.7 - Cross-Site Request Forgery
Klarna Payments for WooCommerce <= 3.2.4 - Missing Authorization
Christmas Greetings <= 1.2.5 - Reflected Cross-Site Scripting
Booking Activities <= 1.15.19 - Reflected Cross-Site Scripting
Paid Memberships Pro – Mailchimp Add On <= 2.3.4 - Unauthenticated Information Disclosure
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.8.0 - Cross-Site Request Forgery to Publicly Accessible Form Submission Export
News Wall <= 1.1.0 - Cross-Site Request Forgery to Plugin Settings Update
Fluent CRM <= 2.8.44 - Authenticated (Administrator+) Stored Cross-Site Scripting
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.1 - Cross-Site Request Forgery
Sponsors <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.