Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 3 822
Wyczyść filtryWooCommerce Ninja Forms Product Add-ons <= 1.7.0 - Unauthenticated Arbitrary File Upload
Minimum Purchase for WooCommerce <= 2.0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Eupago Gateway For Woocommerce <= 3.1.9 - Cross-Site Request Forgery via eupago_page_content
ProductX – Gutenberg WooCommerce Blocks <= 2.7.8 - Missing Authorization via option_data_save
Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization in Reviews Exporter
IRivYou <= 2.2.1 - Cross-Site Request Forgery via saveOptionsReviewsPlugin
Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization
Booster for WooCommerce <= 7.1.1 - Authenticated (Subscriber+) Information Disclosure via Shortcode
WooODT Lite <= 2.4.6 - Reflected Cross-Site Scripting
WooCommerce Login Redirect <= 2.2.4 - Cross-Site Request Forgery
Order auto complete for WooCommerce <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Captcha/Honeypot for Contact Form 7 <= 1.11.3 - Captcha Bypass
Abandoned Cart Lite for WooCommerce <= 5.15.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
TM WooCommerce Compare & Wishlist <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Woocommerce ESTO <= 2.23.1 - Cross-Site Request Forgery via saveSetting
Ni Purchase Order(PO) For WooCommerce <= 1.2.1 - Authenticated (Admin+) Arbitrary File Upload
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
BEAR <= 1.1.3.3 - Missing Authorization to Product Deletion
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Profile Deletion
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.