Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 445
Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor <= 3.0.5 - Unauthenticated Information Exposure
Participants Database <= 2.7.8.4 - Missing Authorization
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.66 - Missing Authorization
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.6.7 - Missing Authorization
YT Player – Embed and Customize Video Players <= 2.0.9 - Missing Authorization
Really Simple CSV Importer <= 1.3 - Authenticated (Admin+) Arbitrary File Upload
Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More <= 2.6.5 - Missing Authorization
Complianz – GDPR/CCPA Cookie Consent <= 7.5.1 - Unauthenticated Information Exposure
Ziina <= 1.2.21 - Missing Authorization
PayU CommercePro Plugin <= 3.8.9 - Missing Authorization
HashThemes Demo Importer <= 1.4.3 - Authenticated (Author+) Stored Cross-Site Scripting
Fluent Support – Helpdesk & Customer Support Ticket System <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mailster - Email Newsletter Plugin for WordPress <= 4.1.17 - Authenticated (Editor+) Arbitrary File Upload
Complianz – GDPR/CCPA Cookie Consent <= 7.5.1 - Authenticated (Administrator+) PHP Object Injection
Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.2.4 - Missing Authorization
Ninja Tables – Easy Data Table Builder <= 5.2.10 - Unauthenticated Information Exposure
WP Fast Total Search – The Power of Indexed Search <= 1.81.282 - Missing Authorization
GiveWP – Donation Plugin and Fundraising Platform <= 4.16.3 - Cross-Site Request Forgery
Ebook Store <= 6.19 - Missing Authorization
JetEngine <= 3.8.11 - Authenticated (Contributor+) Sever-Side Request Forgery
QuickCal <= 1.0.16 - Missing Authorization
Create <= 2.6.0 - Unauthenticated Sensitive Information Exposure
MapSVG <= 8.14.0 - Authenticated (Contributor+) SQL Injection
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.