Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 609
Roi Calculator <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
PDF Invoices for WooCommerce + Drag and Drop Template Builder <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bridge Core <= 3.3 - Missing Authorization
KBucket <= 4.1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Nested Pages <= 3.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Blur Text <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Post Grid Master <= 3.4.12 - Authenticated (Contributor+) Local File Inclusion
Extensions For CF7 <= 3.2.0 - Authenticated (Admin+) Sever-Side Request Forgery
VForm <= 3.0.5 - Missing Authorization
RSVPMarker <= 11.4.5 - Missing Authorization
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.7.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Simple Download Monitor <= 3.9.25 - Authenticated (Administrator+) SQL Injection
Event post <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wishlist for WooCommerce <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Modal Window <= 6.1.4 - Cross-Site Request Forgery to Settings Ipdate
People Lists <= 1.3.10 - Missing Authorization
Super Block Slider <= 2.7.9 - Missing Authorization
Bug Library <= 2.1.4 - Authenticated (Contributor+) SQL Injection
Atarim <= 4.0.8 - Unauthenticated Stored Cross-Site Scripting
ShMapper by Teplitsa <= 1.5.0 - Authenticated (Editor+) Stored Cross-Site Scripting
ElementInvader Addons for Elementor <= 1.3.1 - Missing Authorization
Admin and Site Enhancements (ASE) Pro <= 7.6.1.1 - Missing Authorization
GDPR CCPA Compliance Support <= 2.7.1 - Missing Authorization
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.