Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 728
LSD Custom taxonomy and category meta <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Flickr Shortcode Importer <= 2.2.3 - Authenticated (Administrator+) PHP Object Injection
WP Customize Login Page <= 1.6.5 - Missing Authorization
Carousel-of-post-images <= 1.07 - Authenticated (Contributor+) Stored Cross-Site Scripting
occupancyplan <= 1.0.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Twitter Card Generator <= 1.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Vasaio QR Code <= 1.2.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Tooltip <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.10.35 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Call Now PHT Blog <= 2.4.1 - Cross-Site Request Forgery
Milat jQuery Automatic Popup <= 1.3.1 - Cross-Site Request Forgery to Stored Cross-site Scripting
Prevent Direct Access 2.8.6 - 2.8.8.2 - Incorrect Authorization to Authenticated (Contributor+) Multiple Media Actions
GTDB Guitar Tuners <= 4.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Awesome Wp Image Gallery <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bulk Assign Linked Products For WooCommerce <= 2.1 - Missing Authorization
Inline Text Popup <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-reCAPTCHA-bp <= 4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
External Markdown <= 0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
All in One Time Clock Lite <= 1.3.325 - Cross-Site Request Forgery
WP Custom Post Popup <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Modern Polls <= 1.0.10 - Cross-Site Request Forgery
Peekaboo <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Time Based Greeting <= 2.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.