Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryRename wp-login.php <= 2.6.0 - Cross-Site Request Forgery & Unauthenticated Settings Change
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.6.1 - Cross-Site Scripting
Photo Gallery by Supsystic <= 1.15.5 - Cross-Site Request Forgery to Plugin Settings Change
Lana Email Tester <= 1.0.0 - Missing Authorization to Mail Relay & Cross-Site Request Forgery
OnePress Opt-In Panda <= 2.6.2 - Missing Authorization on AJAX Actions
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.10 - Code Injection
Premium Courses & eLearning <= 1.0.5 - SQL Injection
Export to Text <= 2.4 - Unauthenticated Post Export
Sharebar <= 1.4.1 - Cross-Site Request Forgery to Settings Update & Cross-Site Scripting
pagebar <= 2.65 - Cross-Site Request Forgery to Settings Update and Cross-Site Scripting
Popup | Custom Popup Builder <= 1.3.1 - Missing Capabilities Check
XO Slider <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
WordPress Team Manager <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Travel Management <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Real Cookie Banner <= 2.18.1 - Reflected Cross-Site Scripting
LearnPress – WordPress LMS Plugin <= 4.1.6.5 - Reflected Cross-Site Scripting
Gravity PDF <= 6.3.0 - Reflected Cross-Site Scripting
Qubely <= 1.7.9 - Incorrect Authorization
Clearfy Cache <= 2.0.4 - Reflected Cross-Site Scripting
Table Rate Shipping Method for WooCommerce by Flexible Shipping <= 4.11.8 - Reflected Cross-Site Scripting
Easy Testimonials <= 3.8 - Reflected Cross-Site Scripting
Checkout Fields Manager for WooCommerce <= 5.5.6 - Reflected Cross-Site Scripting
Elementor Website Builder <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.