Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryBeaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Image URL
Zephyr Project Manager <= 3.2.42 - Missing Authorization to Cross-Site Scripting
Gettext override translations <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Text Block'
Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Caption - On Hover
Zephyr Project Manager <= 3.2.42 - Reflected Cross-Site Scripting
Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Title'
Ultimate SMS Notifications for WooCommerce <= 1.4.1 - CSV Injection
Form Builder CP <= 1.2.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Text Editor
Better Delete Revision <= 1.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Simple File List <= 4.4.11 - Reflected Cross-Site Scripting
Better Font Awesome <= 2.0.1 - Missing Authorization to Plugin Options Update
Alphabetic Pagination <= 3.0.7 - Missing Authorization to Unauthenticated Arbitrary Options Update
About Me <= 1.0.12 - Missing Authorization
About Rentals <= 1.5 - Missing Authorization
Event Calendar <= 1.4.6 - Missing Authorization to Event Modification
Launcher: Coming Soon & Maintenance Mode <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
Accommodation System <= 1.0.1 - Missing Authorization
Poll, Survey, Questionnaire and Voting system <= 1.7.4 - Authenticated (Administrator+) Cross-Site Scripting
SEO Scout <= 0.9.83 - Cross-Site Request Forgery to Settings Update
Event Calendar <= 1.4.6 - Reflected Cross-Site Scripting
WPtouch <= 4.3.42 - Reflected Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.