Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 3 822
Wyczyść filtryProduct Slider for WooCommerce <= 2.5.6 - Missing Authorization
Trust Payments Gateway (3DS2) <= 1.2.2 - Cross-Site Request Forgery
Tabs – Responsive Tabs with WooCommerce Product Tab Extension <= 3.6.0 - Authenticated (Admin+) Arbitrary Options Update
WPGraphQL WooCommerce <= 0.12.3 - Information Disclosure
WP ERP <=1.10.5 - Sensitive Data Exposure
Trust Payments Gateway (3DS2) <= 1.2.0 - Cross-Site Request Forgery
Stockists Manager for Woocommerce <= 1.0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Homepage Product Organizer for WooCommerce <= 1.1 - Authenticated (Subscriber+) SQL Injection
MultiSafepay plugin for WooCommerce <= 4.15.0 - Arbitrary File Read
Abandoned Cart Recovery for WooCommerce by Autonami <= 2.1.1 - Missing Authorization
Web and WooCommerce Addons for WPBakery Builder <= 1.4.4.1 - Missing Authorization Checks
Booster for WooCommerce <= 5.5.9 - Reflected Cross-Site Scripting
Music Player for WooCommerce <= 1.0.172 - Authenticated (Admin+) Stored Cross-Site Scripting
Custom Product Tabs for WooCommerce <= 1.7.7 - Subscriber+ Settings Update
Discount Rules for WooCommerce <= 2.4.1 - Reflected Cross-Site Scripting
Dropshipping and affiliates for Amazon and woocommerce <= 1.4.3 - Missing Authorization
eBay Dropshipping and Affiliate by Wooshark <= 1.5.6 - Unprotected AJAX Actions
CDI – Collect and Deliver Interface for Woocommerce <= 5.1.9 - Multiple Cross-Site Scripting
WP Event Manager – Easily Build your Calendar of Events! <= 3.1.27 - Stored Cross Site Scripting
WooCommerce <= 6.5.1 - Authenticated (Admin+) HTML Injection
WooCommerce – Product Importer <= 1.5.2 - Reflected Cross-Site Scripting
WooCommerce PDF Invoices & Packing Slips <= 2.15.0 - Reflected Cross-Site Scripting
Pricing Deals for WooCommerce <= 2.0.2.02 - Unauthenticated SQL Injection
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.