Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 498
Wyczyść filtryCatalog Importer, Scraper & Crawler <= 5.1.4 - Unauthenticated PHP Code Injection
XStore < 9.6.1 - Authenticated (Subscriber+) Local File Inclusion
Responsive Filterable Portfolio <= 1.0.24 - Authenticated (Admin+) Arbitrary File Upload
Auto Save Remote Images (Drafts) <= 1.0.9 - Authenticated (Contributor+) Server-Side Request Forgery
Import any XML, CSV or Excel File to WordPress <= 3.9.3 - Authenticated (Admin+) Limited Unsafe File Upload
WP eBay Product Feeds <= 3.4.8 - Authenticated (Contributor+) Server Side Request Forgery
Doccure Core <= 1.5.3 - Unauthenticated Arbitrary File Upload
Doccure <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload
Kallyas <= 4.22.0 - Authenticated (Contributor+) Arbitrary File Upload
Bulk Featured Image <= 1.2.2 - Authenticated (Admin+) Arbitrary File Upload
Gracioza <= 1.0.15 - Unauthenticated Local File Inclusion
Militarology <= 1.0.15 - Unauthenticated Local File Inclusion
Monyxi <= 1.1.8 - Unauthenticated Local File Inclusion
Mamita <= 1.0.9 - Unauthenticated Local File Inclusion
Strux <= 1.9 - Unauthenticated Local File Inclusion
Lettuce <= 1.1.7 - Unauthenticated Local File Inclusion
Multi Step Form <= 1.7.25 - Authenticated (Admin+) Arbitrary File Upload
Kings & Queens <= 1.1.16 - Unauthenticated Local File Inclusion
ShieldGroup <= 2.13 - Unauthenticated Local File Inclusion
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One <= 2.3.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Jack Well <= 1.0.14 - Unauthenticated Local File Inclusion
Ludos Paradise <= 2.1.3 - Unauthenticated Local File Inclusion
Palladio <= 1.1.10 - Unauthenticated Local File Inclusion
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.