Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 35
Wyczyść filtryEvent Booking Manager for WooCommerce <= 5.5.0 - Missing Authorization
Event Booking Manager for WooCommerce <= 5.3.7 - Unauthenticated Insecure Direct Object Reference
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.6.0 - Unauthenticated Insecure Direct Object Reference
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.5.0 - Missing Authorization
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.5.0 - Missing Authorization
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar < 5.3.7 - Missing Authorization
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar < 5.3.7 - Authenticated (Contributor+) PHP Object Injection
Event Booking Manager for WooCommerce <= 5.3.7 - Missing Authorization to Authenticated (Contributor+) Site-Wide Payment Settings Modification via mep_save_payment_settings_modal AJAX Action
Event Booking Manager for WooCommerce (Pro) <= 5.0.2 - Unauthenticated Price Manipulation
Event Booking Manager for WooCommerce <= 5.3.6 - Authenticated (Author+) Stored Cross-Site Scripting
Event Booking Manager for WooCommerce <= 5.3.3 - Missing Authorization
Event Booking Manager for WooCommerce <= 5.1.4 - Reflected Cross-Site Scripting
WpEvently <= 5.1.1 - Unauthenticated PHP Object Injection
WpEvently < 5.1.9 - Unauthenticated Information Exposure
WpEvently <= 5.0.8 - Authenticated (Contributor+) PHP Object Injection
WpEvently <= 5.1.1 - Cross-Site Request Forgery
WpEvently <= 5.0.4 - Missing Authorization
WpEvently <= 5.0.4 - Missing Authorization
WpEvently <= 4.4.8 - Authenticated (Contributor+) PHP Object Injection
WpEvently <= 4.4.6 - Missing Authorization
WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WpEvently <= 4.3.6 - Authenticated (Contributor+) PHP Object Injection
WpEvently <= 4.2.9 - Missing Authorization
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.