Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 647
Survey Maker <= 5.1.6.3 - Unauthenticated Authorization Bypass
Tutor LMS <= 3.4.0 - Authenticated (Subscriber+) HTML Injection
Flo Forms <= 1.0.43 - Missing Authorization
Team Circle Image Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection
Spider Elements – Addons for Elementor <= 1.6.3 - Missing Authorization
Broadstreet <= 1.52.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Popping Content Light <= 2.4 - Reflected Cross-Site Scripting
Funnel Builder for WordPress by FunnelKit <= 3.10.1 - Authenticated (Administrator+) SQL Injection
Hive Support <= 1.2.5 - Missing Authorization
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download
Motors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Hive Support <= 1.2.5 - Missing Authorization
WP-Recall <= 16.26.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Advanced Advertising System <= 1.3.1 - Open Redirect
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'printer_text'
Asgaros Forum <= 3.0.0 - Authenticated (Subscriber+) Authorization Bypass
Global Gallery <= 8.8.0 - Reflected Cross-Site Scripting
MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion
5sterrenspecialist <= 1.4 - Reflected Cross-Site Scripting
Accessibility Suite by Online ADA <= 4.18 - Authenticated (Subscriber+) Arbitrary File Upload
WordPress Tag, Category, and Taxonomy Manager – AI Autotagger <= 3.32.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Nomupay Payment Processing Gateway <= 7.1.5 - Authenticated (Subscriber+) Arbitrary File Download
CM Registration and Invitation Codes <= 2.5.5 - Missing Authorization
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.