Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.587
Post Status Notifier Lite <= 1.11.0 - Reflected Cross-Site Scripting
Footer Putter <= 6.1.3 - Reflected Cross-Site Scripting
Integration for Contact Form 7 and Constant Contact <= 1.1.4 - Open Redirect
Events Addon for Elementor <= 2.1.2 - Cross-Site Request Forgery
LuckyWP Scripts Control <= 1.2.1 - Missing Authorization
Thrive Theme Builder < 3.24.0 - Missing Authorization
WP Courses LMS <= 3.2.3 - Cross-Site Request Forgery
LayerSlider <= 7.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Thrive Theme Builder < 3.24.0 - Privilege Escalation
eCommerce Product Catalog for WordPress <= 3.3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Thrive Theme Builder < 3.24.2 - Cross-Site Request Forgery
Essential Grid <= 3.0.18 - Missing Authorization
Forminator <= 1.27.0 - Authenticated (Administrator+) Arbitrary File Upload
WP Courses LMS <= 3.2.3 - Missing Authorization
Interactive World Map <= 3.2.0 - Reflected Cross-Site Scripting
Restaurant & Cafe Addon for Elementor <= 1.5.2 - Missing Authorization
Improper neutralization of SQL parameter in PrestaHero (ETS Soft) - BLOG - Drive High Traffic & Boost SEO module for PrestaShop
Improper Neutralization of Input During Web Page Generation in Nukium - NKM GLS module for PrestaShop
Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task
Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service (DoS) condition.
Delete Duplicate Posts <= 4.8.9 - Missing Authorization via AJAX Actions
Uploading SVG, WEBP and ICO files <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Filr – Secure document library <= 1.2.3.5 - Authenticated (Author+) Arbitrary File Upload
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.