Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 3 822
Wyczyść filtryWP Event Manager <= 3.1.22 - Admin+ Stored Cross-Site Scripting
NotificationX <= 2.3.8 - Blind SQL Injection
Custom Content Shortcode <= 3.8.8 - Unauthorised Arbitrary Post Metadata Access
Product Feed PRO for WooCommerce <= 11.2.1 - Reflected Cross-Site Scripting
Conversios.io - Google Analytics and Google Shopping plugin for WooCommerce <= 4.6.1 Authenticated SQL Injection
TI WooCommerce Wishlist / TI WooCommerce Wishlist Pro < 1.40.1 - Unauthenticated SQL Injection
Perfect Brands for WooCommerce <= 2.0.4 - Server Information Disclosure
Perfect Brands for WooCommerce <= 2.0.4 - Unauthorized Brand Creation
WOOCS <= 1.3.7.4 - Reflected Cross-Site Scripting via AJAX action
PPOM for WooCommerce <= 23.9 - Missing Authorization to Stored Cross-Site Scripting
Side Cart Woocommerce (Ajax) <= 2.0 - Cross-Site Request Forgery to Arbitrary Options Update
WooCommerce – Store Exporter <= 2.7 - Reflected Cross-Site Scripting
Store Toolkit for WooCommerce <= 2.3.1 - Reflected Cross-Site Scripting
Rearrange Woocommerce Products <= 3.0.7 - Subscriber+ SQL Injection
TrustMate.io integration for WooCommerce < 1.8.12 - Authenticated (Subscriber+) Arbitrary Blog Option Update
TrustMate.io integration for WooCommerce < 1.8.12 - Authenticated (Subscriber+) Arbitrary Settings Update
WOOF - Products Filter for WooCommerce <= 1.2.6.2 - Reflected Cross-Site Scripting
Orders Tracking for WooCommerce <= 1.0.14 - Reflected Cross-Site Scripting
Product Feed PRO for WooCommerce <= 11.0.6 - Settings Update to Stored Cross-Site Scripting
Responsive Tabs with WooCommerce Product Tab Extension <= 3.5.4 - Unauthenticated Arbitrary Option Update
WooCommerce myghpay Payment Gateway <= 3.0 Reflected Cross-Site Scripting
WOOCS <= 1.3.7.2 - Reflected Cross-Site Scripting
WooCommerce EnvioPack <= 1.2 Reflected Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.