Średnia
CVE-2021-24418
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtry
Średnia
CVE-2021-24331
Smooth Scroll Page Up/Down Buttons <= 1.3 - Cross-Site Scripting
Średnia
CVE-2021-24286
Redirect 404 to parent < 1.3.1 - Reflected Cross-Site Scripting
Średnia
CVE-2021-24219
Multiple Thrive Themes and Plugins (Various Versions) - Arbitrary Options Update
Średnia
CVE-2021-24287
Select All Categories and Taxonomies, Change Checkbox to Radio Buttons < 1.3.2 - Reflected Cross-Site Scripting
Średnia
CVE-2021-24428
Rss for Yandex Turbo <= 1.30 - Admin+ Stored Cross-Site Scripting
Wysoka
ea4e9263-36f7-490c-9dad-d3b806bcfdf4
Visitor Traffic Real Time Statistics <= 2.13 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Wysoka
CVE-2021-24195
Login as User or Customer < 1.8 - Missing Authorization to Arbitrary Plugin Installation/Activation
Wysoka
CVE-2021-24194
Limit Login Attempts (Spam Protection) <= 2.8 - Missing Authorization to Arbitrary Plugin Installation/Activation
Wysoka
c873d838-58e8-4f69-bccb-6d1de8d91877
Login as User or Customer <= 2.1 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Wysoka
CVE-2021-24188
WP Copy Protection & No Right Click <= 3.1.4 - Missing Authorization to Arbitrary Plugin Installation/Activation
Wysoka
CVE-2021-24192
Tree Sitemap (Pages, Posts & Categories list) <= 2.9 - Missing Authorization to Arbitrary Plugin Installation/Activation
Wysoka
b4d33e69-3620-42d9-adb3-267a5ed02a58
WP Maintenance Mode & Site Under Construction <= 1.8.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Wysoka
CVE-2021-24189
Captchinoo Captcha <= 2.3 - Missing Authorization to Arbitrary Plugin Installation/Activation
Wysoka
CVE-2021-24191
WP Maintenance Mode & Site Under Construction < 1.8.2 - Missing Authorization to Arbitrary Plugin Installation/Activation
Wysoka
7d525c50-5911-4be6-a860-b48db619adba
Limit Login Attempts (Spam Protection) <= 2.9 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Wysoka
70c144c9-2d96-404d-bcca-707519c9b71c
WP Content Copy Protection & No Right Click <= 3.3 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Wysoka
5658f62b-2f4a-46f7-b229-8e239c7ef148
Tree Sitemap (Pages, Posts & Categories list) <= 2.9 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Wysoka
CVE-2021-24190
WooCommerce Conditional Marketing Mailer <= 1.5.1 - Improper Authorization
Wysoka
CVE-2021-24193
Visitor Traffic Real Time Statistics <= 2.11 - Missing Authorization to Arbitrary Plugin Installation/Activation
Wysoka
245f8eec-d496-4298-800d-ea1120640e2d
Captchinoo, admin login page protection with Google recaptcha <= 2.4 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Wysoka
22713937-d834-46cf-83ec-6f9f61b548e3
Conditional Marketing Mailer for WooCommerce <= 1.5.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Średnia
21a1a6c2-0eb1-4ee3-abf0-76b84adca01b
iThemes Security < 7.9.1 and iThemes Security Pro < 6.8.4 - Hidden Login Bypass
Średnia
CVE-2021-24283
Accordion <= 2.2.29 - Reflected Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.