Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.583
LadiApp <= 4.3 - Missing Authorization
Multiple Post Passwords <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Business Directory Plugin <= 6.3.10 - Cross-Site Request Forgery
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization
BSK Forms Blacklist <= 3.6.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Formzu WP <= 1.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id
Product Size Chart For WooCommerce <= 1.1.5 - Cross-Site Request Forgery via get_save_option
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action
Button Generator – easily Button Builder <= 2.3.8 - Missing Authorization
Aruba HiSpeed Cache <= 2.0.6 - Sensitive Information Exposure via Log File
Media File Renamer <= 5.6.9 - Sensitive Information Exposure via Log File
MkRapel Regiones y Ciudades de Chile para WC <= 4.3.0 - Cross-Site Request Forgery via multiple functions
Quantity Plus Minus Button for WooCommerce by CodeAstrology <= 1.1.9 - Cross-Site Request Forgery via wqpmb_form_submit
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL injection via key
WP Forms Puzzle Captcha <= 4.1 - Captcha Bypass
IdeaPush <= 8.57 - Missing Authorization
WP Cleanfix <= 5.6.2 - Missing Authorization via register
WP Catalogue <= 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
WooCommerce Login Redirect <= 2.2.4 - Cross-Site Request Forgery
WP Retina 2x <= 6.4.5 - Sensitive Information Exposure
MyTube PlayList <= 2.0.3 - Reflected Cross-Site Scripting via addplaylistid
Abandoned Cart Lite for WooCommerce <= 5.16.1 - Missing Authorization via multiple AJAX functions
Export WP Page to Static HTML/CSS <= 2.1.9 - Missing Authorization via Multiple AJAX Actions
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.