Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 647
ez Form Calculator - WordPress plugin <= 2.14.1.2 - Reflected Cross-Site Scripting
Showeblogin Social <= 7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPBookit <= 1.0.7 - Missing Authorization
Contact Form Builder by vcita <= 4.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Easy Google Maps <= 1.11.18 - Authenticated (Author+) XML Entity Injection
m1.DownloadList <= 0.23 - Authenticated (Contributor+) Sensitive Information Disclosure
YaMaps for WordPress <= 0.6.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
Turbo Addons for Elementor <= 1.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
AdMail – Multilingual Back in-Stock Notifier for WooCommerce <= 1.7.0 - Missing Authorization
MasterStudy LMS <= 3.5.28 - Authenticated (Contributor+) Local File Inclusion
Post to Social Media – WordPress to Hootsuite <= 1.5.9 - Cross-Site Request Forgery
UltraAddons <= 2.0.0 - Cross-Site Request Forgery
Split Test For Elementor <= 1.8.3 - Authenticated (Editor+) SQL Injection
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.3 - Cross-Site Request Forgery
Display product variations dropdown on shop page <= 1.1.3 - Missing Authorization
SurveyJS <= 1.12.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Broadstreet <= 1.51.1 - Cross-Site Request Forgery
VK Filter Search <= 2.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Lafka Plugin <= 7.1.0 - Missing Authorization to Authenticated (Subscriber+) Theme Option Update
Brizy <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
Variable Inspector < 2.7.1 - Missing Authorization
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.9.4 - Missing Authorization
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.