Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 647
Beaver Builder – WordPress Page Builder <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure
Geo Controller <= 8.9.5 - Unauthenticated Information Exposure
Just TinyMCE Custom Styles <= 1.2.1 - Cross-Site Request Forgery
Social Photo Fetcher <= 3.0.4 - Cross-Site Request Forgery
YaMaps <= 0.6.39 - Authenticated (Contributor+) Stored Cross-Site Scripting
Table Block by Tableberg <= 0.6.9 - Missing Authorization
WP-CRM System <= 3.4.6 - Missing Authorization
Flashy Marketing Automation <= 2.0.8 - Cross-Site Request Forgery
Eupago Gateway For Woocommerce <= 4.7.1 - Missing Authorization
Social Reviews & Recommendations <= 2.5 - Unauthenticated Stored Cross-Site Scripting via Social Media Reviews
Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.4.6 - Missing Authorization
Page View Count <= 2.9.1 - Missing Authorization to Authenticated (Subscriber+) Settings Update
EasyCart <= 5.8.11 - Unauthenticated Information Exposure
ProfilePress <= 4.16.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
AI CoPilot <= 1.2.7 - Authenticated (Contributor+) Sensitive Information Exposure
Plugin Organizer <= 10.2.3 - Authenticated (Subscriber+) SQL Injection
Email Capture <= 3.12.4 - Missing Authorization
Ultimate Review <= 2.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Salon booking system <= 10.30.3 - Cross-Site Request Forgery
WooCommerce PDF Invoices & Packing Slips <= 4.9.1 - Missing Authorization
Make Section & Column Clickable For Elementor <= 2.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Yandex.Metrica <= 1.2.2 - Missing Authorization
Generic Elements <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.