Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryGreenshift – animation and page builder blocks <= 4.9.9 - Authenticated (Author+) Stored Cross-Site Scripting
Uncanny Toolkit for LearnDash <= 3.6.4.1 - Cross-Site Request Forgery to Arbitrary Plugin Install and Activation
Welcart e-Commerce <= 2.8.10 - Unauthenticated Stored Cross-Site Scripting
Advanced Social Pixel <= 2.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Simple Image Popup <= 1.3.6 - Authenticated (Admin+) Stored Cross-Site Scripting
JS Help Desk <= 2.7.1 - Missing Authorization to Plugin Settings Update
ChatBot <= 4.3.0 - Authenticated (Admin+) Cross-Site Scripting
Simple Newsletter Plugin – Noptin <= 1.10.3 - Unauthenticated CSV Injection
JS Help Desk <= 2.7.1 - Missing Authorization
JS Help Desk <= 2.7.1 - Unauthenticated Arbitrary File Upload
ContentStudio <= 1.2.5 - Information Exposure
VikBooking Hotel Booking Engine & PMS <= 1.5.11 - Authenticated (Admin+) Stored Cross-Site Scripting
bbPress Voting <= 2.1.11.0 - Authenticated (Admin+) Stored Cross-Site Scripting
TinyMCE Custom Styles <= 1.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Table Manager <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WooCommerce PDF Invoices & Packing Slips <= 3.2.5 - Cross Site Request Forgery
Limit Login Attempts Plus <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.48 - Authenticated (Admin+) Cross Site Scripting (XSS)
Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration <= 1.62.0 - Authenticated (Admin+) Cross Site Scripting
Simple Photo Gallery <= 1.8.1 - Authenticated (Admin+) SQL Injection
Ecwid Ecommerce Shopping Cart <= 6.11.3 - Cross Site Request Forgery
WPComplete <= 2.9.4 - Reflected Cross-Site Scripting
Organization chart <= 1.4.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.