Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 498
Wyczyść filtryCustomer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload
Contact Form 7 Extension For Mailchimp <= 0.5.70 - Authenticated (Subscriber+) Server-Side Request Forgery
Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated Arbitrary File Upload via uploadFile
WP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via css
Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload
Product Feed Manager <= 7.3.15 - Authenticated (Admin+) Directory Traversal
Piotnet Forms <= 1.0.25 - Missing Authorization via multiple AJAX actions
JVM rich text icons <= 1.2.3 - Authenticated(Subscriber+) Arbitrary File Upload
WP MLM <= 4.0 - Unauthenticated Arbitrary File Upload
TerraClassifieds <= 2.0.3 Unauthenticated Arbitrary File Upload
Frontend Admin by DynamiApps Plugin <= 3.18.3 - Unauthenticated Arbitrary File Upload
Verge3D <= 4.5.2 - Authenticated(Subscriber+) Arbitrary File Upload
Happy Addons for Elementor <= 3.9.1.1 - Server Side Request Forgery
Rencontre – Dating Site <= 3.10.1 - Unauthenticated Arbitrary File Upload
Piotnet Forms Plugin <= 1.0.28 - Unauthenticated Arbitrary File Upload
BERTHA AI Plugin <= 1.11.10.7 - Unauthenticated Arbitrary File Upload
WP Mail Log Plugin <= 1.1.2 - Authenticated(Contributor+) Arbitrary File Upload
Ultimate Addons for Beaver Builder <= 1.35.13 - Authenticated(Contributor+) Directory Traversal to Arbitrary File Download
Media File Renamer <= 5.7.7 - Authenticated(Administrator+) Remote Code Execution
Backup Migration 1.0.8 - 1.3.9 - Remote File Inclusion via content-dir
Essential Blocks <= 4.4.2 - Unauthenticated Local File Inclusion
JSM file_get_contents() Shortcode <= 2.7.0 - Authenticated (Contributor+) Server-Side Request Forgery via Shortcode
EditorsKit <= 1.40.3 - Authenticated (Administrator+) Arbitrary File Upload
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.