Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 602
Outdooractive Embed <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP SHAPES <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Sell Tickets Online – TicketSource Ticket Shop for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Embed Twine <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Particle Background <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Financial Calculator <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wtyczka SeoPilot dla WP <= 3.3.091 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Spotlightr <= 0.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Astro's server source code is exposed to the public if sourcemaps are enabled
PCRecruiter Extensions <= 1.4.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
SaasPricing <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Royal Elementor Addons <= 1.7.1001 - Missing Authorization
Aklamator INfeed <= 2.0.0 - Reflected Cross-Site Scripting
CodeBard Help Desk <= 1.1.1 - Cross-Site Request Forgery
Eventin <= 4.0.7 - Authenticated (Contributor+) Local File Inclusion
Barter <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
SSL Wireless SMS Notification <= 3.6.0 - Unauthenticated Privilege Escalation
WP Nice Loader <= 0.1.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Widget Options <= 4.0.6.1 - Missing Authorization
PKT1 Centro de envios <= 1.2.1 - Reflected Cross-Site Scripting
Contact Form 7 Dynamic Text Extension <= 5.0.1 - Cross-Site Request Forgery
Themify Builder <= 7.6.3 - Authenticated (Contributor+) Local File Inclusion
WPMozo Addons Lite for Elementor <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.