Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 3 822
Wyczyść filtryCheckout Field Visibility for WooCommerce <= 1.3.0 - Unauthenticated Local File Inclusion
Booking and Rental Manager <= 2.3.6 - Missing Authorization
Coupon Affiliates – Affiliate Plugin for WooCommerce <= 6.3.0 - Reflected Cross-Site Scripting via 'commission_summary' Parameter
Booster Plus for WooCommerce <= 7.2.4 - Reflected Cross-Site Scripting
StoreContrl Woocommerce <= 4.1.3 - Unauthenticated Arbitrary File Download
Ultimate Store Kit Elementor Addons <= 2.4.0 - Unauthenticated PHP Object Injection
Vitepos <= 3.1.7 - Missing Authorization
Advanced Dynamic Pricing for WooCommerce <= 4.9.3 - Cross-Site Request Forgery to Settings Update
Booking and Rental Manager <= 2.2.8 - Missing Authorization
WooCommerce Product Table Lite <= 3.9.5 - Missing Authorization
WowStore <= 4.2.4 - Missing Authorization
Integration for WooCommerce and QuickBooks <= 1.3.1 - Cross-Site Request Forgery
WooCommerce Social Login <= 2.8.2 - Cross-Site Request Forgery
Conditional Shipping for WooCommerce <= 3.4.0 - Cross-Site Request Forgery
Conditional Payments for WooCommerce <= 3.3.0 - Cross-Site Request Forgery
Kadence WooCommerce Email Designer <= 1.5.14 - Authenticated (Admin+) Arbitrary File Upload
Essential Addons for Elementor <= 6.1.9 - Authenticated (Contributor+) Information Disclosure
Eventin <= 4.0.25 - Authenticated (Contributor+) Local File Inclusion
Checkout Files Upload for WooCommerce <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products <= 2.7.7 - Unauthenticated Sensitive Information Exposure
Membership For WooCommerce <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bring Fraktguiden for WooCommerce <= 1.11.4 - Missing Authorization
Barcode Generator for WooCommerce <= 2.0.4 - Authenticated (Subscriber+) Arbitrary Content Deletion
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.