Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 632
VW Storefront <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
Slider by 10Web <= 1.2.61 - Authenticated (Administrator+) Stored Cross-Site Scripting via Widget
Multiple Shipping And Billing Address For Woocommerce <= 1.3 - Unauthenticated SQL Injection
Smart Maintenance Mode <= 1.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
AFI – The Easiest Integration Plugin <= 1.99.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Social Slider Feed <= 2.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Podlove Podcast Publisher <= 4.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Prisna GWT – Google Website Translator <= 1.4.13 - Authenticated (Admin+) Stored Cross-Site Scripting
WordPress WP-Advanced-Search <= 3.3.9.2 - Authenticated (Admin+) Stored Cross-Site Scripting
VikBooking Hotel Booking Engine & PMS <= 1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
tarteaucitron.js for WordPress < 0.3.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider <= 3.94.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Melapress File Monitor <= 2.1.0 - Authenticated (Admin+) Authenticated SQL Injection
Nested Pages <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
PowerPress Podcasting <= 11.9.17 - Authenticated (Author+) Stored Cross-Site Scripting
Hubbub Lite <= 1.34.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider <= 3.94.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Form Maker by 10Web <= 1.15.29 - Authenticated (Admin+) Stored Cross-Site Scripting
Calculated Fields Form <= 5.2.63 - Authenticated (Admin+) Stored Cross-Site Scripting
Melapress File Monitor <= 2.0.2 - Authenticated (Admin+) Authenticated SQL Injection
SMS Alert Order Notifications – WooCommerce <= 3.7.8 - Unauthenticated SQL Injection
Easy Digital Downloads Google Sheet Connector <= 1.6.6 - Cross-Site Request Forgery to Access Code Update
Pre Order Addon for WooCommerce – Advance Order/Backorder Plugin <= 2.2 - Reflected Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.