Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 115
Wyczyść filtryTI WooCommerce Wishlist <= 2.10.0 - Unauthenticated HTML Injection
Premmerce Wishlist for WooCommerce <= 1.1.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wishlist Deletion
ShopEngine <= 4.8.5 - Cross-Site Request Forgery to Wishlist Manipulation
QODE Wishlist for WooCommerce <= 1.2.7 - Unauthenticated Insecure Direct Object Reference to Wishlist Update
Wishlist for WooCommerce <= 1.1.3 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
TI WooCommerce Wishlist <= 2.10.0 - Missing Authorization
YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Wishlist Token Disclosure to Wishlist Item Deletion
YITH WooCommerce Wishlist <= 4.10.0 - Unauthenticated Insecure Direct Object Reference to Unauthenticated Wishlist Rename
Wishlist and Save for later for Woocommerce <= 1.1.22 - Insecure Direct Object Reference to Authenticated (Subscriber+) Wishlist Item Deletion
Wisly <= 1.0.0 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
WPC Smart Wishlist for WooCommerce <= 5.0.4 - Missing Authorization to Authenticated (Subscriber+) Information Exposure
WPC Smart Wishlist for WooCommerce <= 5.0.3 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
TI WooCommerce Wishlist <= 2.10.0 - Missing Authorization
Premmerce Wishlist for WooCommerce <= 1.1.10 - Unauthenticated Local File Inclusion
Wishlist for WooCommerce <= 3.2.3 - Missing Authorization
YITH WooCommerce Wishlist <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Wishlist <= 2.1.0 - Reflected Cross-Site Scripting
MC Woocommerce Wishlist <= 1.9.1 - Reflected Cross-Site Scripting
Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wishlist for WooCommerce <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wishlist <= 2.1.0 - Missing Authorization
Wishlist <= 2.1.0 - Authenticated (Subscriber+) Information Exposure
TI WooCommerce Wishlist <= 2.9.2 - Unauthenticated Arbitrary File Upload
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.