Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryLayerSlider <= 7.1.1 - Admin+ Stored Cross-Site Scripting
SearchIQ – The Search Solution <= 3.8 - Unauthenticated Stored Cross-Site Scripting
HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 8.8.13 - Server Side Request Forgery
Photo Gallery by 10Web <= 1.6.2 - SQL Injection
RSVP and Event Management <= 2.7.7 - Unauthenticated Sensitive Information Disclosure
Master Elements <= 8.0 - Unauthenticated SQL injection
AdRotate – Ad manager & AdSense Ads <= 5.8.22 - Authenticated Stored Cross-Site Scripting via Advert Names
Import and export users and customers <= 1.19.2 - Stored Cross-Site Scripting
Easy Social Feed <= 6.2.6 - Reflected Cross-Site Scripting
Import WP – Import and Export WordPress data to XML or CSV files <= 2.4.5 - Authenticated Arbitrary File Upload
AdRotate – Ad manager & AdSense Ads <= 5.8.22 - Authenticated Stored Cross-Site Scripting via Group Names
WooCommerce < 5.7.0 & WooCommerce Admin < 2.6.4 - Information Disclosure
ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Subscriber+ Arbitrary Affiliate Links Creation
ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Authorization Bypass and Cross-Site Request Forgery
Opensea <= 1.0.2 - Cross-Site Scripting
Social comments by WpDevArt <= 2.4.9 - Admin+ Stored Cross-Site Scripting
Thank Me Later <= 3.3.4 - Admin+ Stored Cross-Site Scripting
Page Restriction WordPress <= 1.2.6 - Admin+ Stored Cross-Site Scripting
Menubar <= 5.7.2 - Reflected Cross-Site Scripting
Coming Soon by Supsystic <= 1.7.5 - Reflected Cross-Site Scripting
Text Hover <= 4.1 - Admin+ Stored Cross-Site Scripting
Pricing Table by Supsystic <= 1.9.4 - Reflected Cross-Site Scripting
Easy Digital Downloads <= 2.11.5 - Cross-Site Request Forgery
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.