Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 494
Wyczyść filtryClone <= 2.4.5 - Missing Authorization
BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal
WP Data Access <= 5.5.7 - Cross-Site Request Forgery
Backup and Restore Wordpress <= 1.50 - Cross-Site Request Forgery to Backup Trigger
Backup and Restore WordPress <= 1.50 - Missing Authorization
Backup and Restore WordPress <= 1.50 - Missing Authorization
XCloner <= 4.7.3 - Unauthenticated Full Path Disclosure
Backup and Staging by WP Time Capsule <= 1.22.20 - Authentication Bypass to Account Takeover
Duplicator <= 1.5.9 - Full Path Disclosure
Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing
File Manager <= 7.2.7 - Missing Authorization
WishList Member X < 3.26.7 - Unauthenticated Information Exposure
WP STAGING PRO - Backup Duplicator & Migration <= 5.6.0 - Cross-Site Request Forgery to Limited Local File Inclusion
FileOrganizer <= 1.0.7 - Sensitive Information Exposure via Directory Listing
WPvivid Backup for MainWP <= 0.9.32 - Reflected Cross-Site Scripting
WP STAGING WordPress Backup Plugin – Migration Backup Restore <= 3.4.3 - Authenticated (Admin+) Arbitrary File Upload
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.9.3 - Authenticated (Administrator+) SQL Injection
Jetpack – WP Security, Backup, Speed, & Growth <= 13.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpvideo Shortcode
Migration Backup Restore <= 3.4.3 - Authenticated (Administrator+) Server-Side Request Forgery
BackUpWordPress <= 3.13 - Authenticated (Admin+) Directory Traversal
WP STAGING <= 3.4.3 and WP STAGING Pro <= 5.4.3 - Sensitive Information Exposure via Log File
WordPress Backup & Migration <= 1.4.8 - Missing Authorization to Directory Traversal
Backup Migration <= 1.4.3 - Information Exposure via Log Files
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.