Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 115
Wyczyść filtryProductive Commerce <= 1.1.22 - Unauthenticated SQL Injection
JetCompareWishlist <= 1.5.9 - Authenticated (Contributor+) Local File Inclusion
Wishlist <= 1.0.44 - Authenticated (Subscriber+) SQL Injection
Wishlist <= 1.0.44 - Cross-Site Request Forgery
Better WishList API <= 1.1.4 - Reflected Cross-Site Scripting
WishSuite <= 1.4.4 - Authenticated (Contributor+) Local File Inclusion
MC Woocommerce Wishlist <= 1.8.9 - Authenticated (Administrator+) SQL Injection
CiyaShop - Multipurpose WooCommerce Theme <= 4.19.0 - Unauthenticated PHP Object Injection
Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.7 - Cross-Site Request Forgery to Cross-Site Scriping via Wishlist Name
Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
TemplatesNext ToolKit <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Wishlist <= 1.0.41 - Authenticated (Contributor+) SQL Injection
Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later <= 1.2.26 - Cross-Site Request Forgery to Wishlist Creation/Modification
WooCommerce Wishlist <= 1.8.7 - Unauthenticated Wishlist Disclosure via download_pdf_file Function
Flexible Wishlist for WooCommerce <= 1.2.25 - Unauthenticated Stored Cross-Site Scripting via wishlist_name Parameter
Wishlist for WooCommerce <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Wishlist <= 1.0.39 - Reflected Cross-Site Scripting
Better WishList API <= 1.1.3 - Unauthenticated Stored Cross-Site Scripting
NC Wishlist for Woocommerce <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.2 - Reflected Cross-Site Scripting
TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Access
Wishlist for WooCommerce: Multi Wishlists Per Customer PRO 3.0.8 - 3.1.2 - Reflected Cross-Site Scripting via wtab Parameter
TI WooCommerce Wishlist <= 2.9.0 - Unauthenticated SQL Injection via 'lang'
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.