Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 741
Makeaholic <= 1.8.4 - Unauthenticated Local File Inclusion
Visual Composer Website Builder <= 45.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
oik <= 4.15.2 - Reflected Cross-Site Scripting
Print My Blog <= 3.27.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
NetInsight Analytics Implementation Plugin <= 1.0.3 - Cross-Site Request Forgery
WP Pipes <= 1.4.3 - Reflected Cross-Site Scripting
WPDM – Premium Packages <= 6.0.2 - Cross-Site Request Forgery
Infility Global <= 2.15.34 - Authenticated (Subscriber+) Arbitrary File Download
Barcode Scanner with Inventory & Order Manager <= 1.9.0 - Authenticated (Admin+) Arbitrary File Download
12 Step Meeting List <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-Database-Optimizer-Tools <= 0.2 - Cross-Site Request Forgery
MaxCoach <= 3.2.5 - Unauthenticated Local File Inclusion
Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'
Embedder for Google Reviews <= 1.7.3 - Missing Authorization
Easy Elementor Addons <= 2.2.7 - Missing Authorization
Quttera Web Malware Scanner <= 3.5.1.41 - Authenticated (Administrator+) Server-Side Request Forgery
Thim Core <= 2.3.3 - Missing Authorization
Blocksy <= 2.1.6 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Add Custom Codes <= 4.80 - Authenticated (Contributor+) Remote Code Execution
Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.9 - Authenticated (Shop Manager+) Arbitrary Code Execution
WP Table Builder <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kadence WooCommerce Email Designer <= 1.5.16 - Authenticated (Shop Manager+) Arbitrary Options Update
WP Statistics <= 14.15 - Missing Authorization
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.