Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 498
Wyczyść filtryEleganzo <= 1.2 - Authenticated (Subscriber+) Arbitrary Directory Deletion
BackWPup <= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block_name' Parameter
Meta Box <= 5.11.1 - Authenticated (Contributor+) Arbitrary File Deletion
wpForo Forum <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion via 'data[body][fileurl]' Parameter
UsersWP <= 1.2.58 - Authenticated (Subscriber+) Server-Side Request Forgery via 'uwp_crop' Parameter
Perfmatters <= 2.5.9 - Authenticated (Subscriber+) Arbitrary File Overwrite via 'snippets' Parameter
Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload
MW WP Form <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keys
ProSolution WP Client <= 1.9.9 - Unauthenticated Arbitrary File Upload via proSol_fileUploadProcess
Online Scheduling and Appointment Booking System – Bookly <= 27.0 - Unauthenticated Price Manipulation via 'tips'
Solene <= 3.4 - Unauthenticated Local File Inclusion
Solene Core <= 2.3.2 - Unauthenticated Local File Inclusion
Uppercase < 1.2.2 - Unauthenticated Local File Inclusion
Aperitif <= 1.5 - Unauthenticated Local File Inclusion
Mr. SEO <= 2.0 - Unauthenticated Local File Inclusion
Blueprint < 1.1.5 - Unauthenticated Local File Inclusion
WaveRide <= 1.4 - Unauthenticated Local File Inclusion
Mikado Core <= 1.6 - Unauthenticated Local File Inclusion
Hitek < 1.8.3 - Unauthenticated Local File Inclusion
Malmö <= 2.2 - Unauthenticated Local File Inclusion
WP-BusinessDirectory – Business directory plugin for WordPress <= 4.0.0 - Authenticated (Subscriber+) Arbitrary File Upload
Getaway < 1.8 - Unauthenticated Local File Inclusion
Gerador de Certificados – DevApps <= 1.3.6 - Authenticated (Administrator+) Arbitrary File Upload
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.