Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 404
Bus Ticket Booking with Seat Reservation <= 5.9.3 - Unauthenticated Insecure Direct Object Reference
Aruba Migration Tool <= 1.0.4 - Missing Authorization
Premmerce Wishlist for WooCommerce <= 1.1.13 - Unauthenticated Stored Cross-Site Scripting
CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 <= 3.7.2 - Unauthenticated Information Exposure
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin <= 2.13.1 - Authenticated (Administrator+) SQL Injection
Captivate Sync <= 3.3.2 - Authenticated (Editor+) SQL Injection
Travelly – Tour & Travel Booking Manager for WooCommerce <= 2.3.1 - Missing Authorization
ProfileGrid – User Profiles, Groups and Communities <= 6.0.0.2 - Unauthenticated Insecure Direct Object Reference
Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor <= 4.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
BuildKit – Product Builder for WooCommerce – Custom PC Builder <= 1.0.28 - Authenticated (Contributor+) SQL Injection
Pie Register – User Registration, Profiles & Content Restriction <= 3.8.4.13 - Unauthenticated Information Exposure
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor <= 4.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor <= 4.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
AFFI – Affiliate Marketing for WooCommerce <= 1.0.9 - Missing Authorization
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.2.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.2.0 - Missing Authorization
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program <= 4.6.3 - Missing Authorization
Unlimited Elements for Elementor <= 2.0.20 - Missing Authorization
Site Reviews <= 8.3.2 - Missing Authorization
Unlimited Elements for Elementor <= 2.0.20 - Authenticated (Contributor+) SQL Injection
Memberful – Membership Plugin <= 1.81.0 - Cross-Site Request Forgery
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.