Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryGuten Free Options <= 0.9.5 - Reflected Cross-Site Scripting
Download Manager <= 3.3.06 - Unauthenticated Information Disclosure via Unprotected Directory
AZ Content Finder <= 0.1 - Reflected Cross-Site Scripting
WordPress Local SEO <= 2.3 - Unauthenticated SQL Injection
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 1.9.80 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
ShipWorks Connector for Woocommerce <= 5.2.5 - Cross-Site Request Forgery to Service Password/Username Update
Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Option Update
WPSyncSheets Lite For Elementor – Elementor Pro Form Google Spreadsheet Addon <= 1.4 - Running Vulnerable Dependencies
Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name
Legull <= 1.2.2 - Reflected Cross-Site Scripting
History timeline <= 0.7.2 - Reflected Cross-Site Scripting
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet <= 2.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Tantyyellow <= 1.0.0.5 - Reflected Cross-Site Scripting
WP Hotel Booking <= 2.1.5 - Missing Authorization
Proofreading <= 1.2.1.1 - Reflected Cross-Site Scripting
Sandbox <= 0.4 - Missing Authorization to Authenticated (Subscriber+) Sandbox Download
Glofox Shortcodes <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
RSS Icon Widget <= 5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
MyBookProgress by Stormhill Media <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via book Parameter
quote-posttype-plugin <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Moving Users <= 1.05 - Unauthenticated Sensitive Information Exposure
WP Download Codes <= 2.5.4 - Reflected Cross-Site Scripting
Goo.gl Url Shorter <= 1.0.1 - Reflected Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.