Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryMW WP Form <= 4.4.5 - Missing Authorization
Ultimate Addons for WPBakery Page Builder <= 3.19.14 - Authenticated(Contributor+) Local File Inclusion
Motors – Car Dealer & Classified Ads <= 1.4.6 - Server Side Request Forgery
WC Captcha <= 1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Eonet Manual User Approve <= 2.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Delete Usermetas <= 1.1.2 - Cross-Site Request Forgery
Motors – Car Dealer & Classified Ads <= 1.4.6 - Reflected Cross-Site Scripting
Auto Login New User After Registration <= 1.9.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via alnuar_auto_login_new_user_after_registration_redirect
Novo-Map : your WP posts on custom google maps <= 1.1.2 - Cross-Site Request Forgery
Popup by Supsystic <= 1.10.19 - Missing Authorization to Sensitive Information Exposure
Booster for WooCommerce <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Social proof testimonials and reviews by Repuso <= 4.97 - Missing Authorization
Archivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scripting
Internal Link Building <= 1.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Team Showcase <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Headline Analyzer <= 1.3.1 - Missing Authorization via REST APIs
BetterLinks <= 1.6.0 - Improper Authorization to Data Import and Export
Internal Link Building <= 1.2.3 - Cross-Site Request Forgery
WhatsApp Share Button <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Triberr <= 4.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Open Graph Metabox <= 1.4.4 - Cross-Site Request Forgery
GeoDirectory <= 2.3.28 - Authenticated (Administrator+) SQL Injection via orderby
iPanorama 360 – WordPress Virtual Tour Builder <= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcode
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.