Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 073
Wyczyść filtryContact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection via getLogHistory Function
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection
Shopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter
Contest Gallery <= 23.1.2 - Unauthenticated Information Exposure
wpForo Forum <= 2.3.4 - Unauthenticated Sensitive Information Exposure
Tutor LMS <= 2.7.2 - Authenticated (Administrator+) SQL Injection
Order Tracking <= 3.3.11 - Missing Authorization via send_test_email()
tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection
Flash & HTML5 Video <= 2.5.31 - Authenticated (Subscriber+) Information Exposure
tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection
Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure
ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure
Sensei LMS – Online Courses, Quizzes, & Learning <= 4.24.1 - Unauthenticated Email Template Disclosure
Bit Form Pro <= 2.6.4 - Authenticated (Subscriber+) Sensitive Information Exposure
Create by Mediavine <= 1.9.8 - Unauthenticated Sensitive Information Exposure
Store Locator Plus <= 2311.17.01 - Unauthenticated Sensitive Information Exposure
Analytify <= 5.3.1 - Cross-Site Request Forgery to Opt-out
Order Export for WooCommerce <= 3.23 - Unauthenticated Sensitive Information Exposure
Leopard - WordPress offload media <= 2.0.36 - Authenticated (Subscriber+) Sensitive Information Exposure
Opti Marketing <= 2.0.9 - Unauthenticated SQL Injection
TrueBooker <= 1.0.3 - Unauthenticated SQL Injection
Shared Files <= 1.7.28 - Unauthenticated Sensitive Information Exposure
Paid Memberships Pro - Membership Maps Add On < 0.7 - Authenticated (contributor+) Information Disclosure
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.