Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryilli Link Party! <= 1.0 - Unauthenticated Stored Cross-Site Scripting
WP-Reply Notify <= 1.1 - Cross-Site Request Forgery to Settings Update
Add SVG Support for Media Uploader | inventivo <= 1.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
WP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting
Advanced Schedule Posts <= 2.1.8 - Reflected Cross-Site Scripting
Ultimate Noindex Nofollow Tool <= 1.1.2 - Cross-Site Request Forgery to Settings Update
illi Link Party! <= 1.0 - Missing Authorization to Unauthenticated Arbitrary Link Deletion
Travelpayouts <= 1.1.13 - Reflected Cross-Site Scripting
aBitGone CommentSafe <= 1.0.0 - Cross-Site Request Forgery to Settings Update and Cross-Site Request Forgery
PDF Generator For Fluent Forms <= 1.1.7 - Cross-Site Scripting
Sticky Buttons <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Content Views <= 3.6.2 - Authenticated(Administrator+) Stored Cross-Site Scripting via settings
Accelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site Scripting
Popup Box Business (7.0.0 - 7.9.0) and Developer (20.0.0 - 20.9.0) - Authenticated (Admin+) Stored Cross-Site Scripting
File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames
easy.jobs <= 2.4.6 - Missing Authorization to Settings Update
ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation
GiveWP <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Ninja Tables <= 5.0.5 - Missing Authorization
Chartjs <= 2023.2 - Authenticated(Editor+) Stored Cross-Site Scripting via chart
WPvivid <= 0.9.94 - Missing Authorization
Cryptocurrency Widgets – Price Ticker & Coins List 2.0 - 2.6.5 - Unauthenticated SQL Injection
Simple Membership <= 4.4.1 - Open Redirect
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.