Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryTurn off all comments <= 1.0 - Reflected Cross-Site Scripting
Gwyn's Imagemap Selector <= 0.3.3 - Reflected Cross-Site Scripting
ShortPixel Adaptive Images <= 3.3.1 - Subscriber+ Arbitrary Settings Update
WPC Smart Wishlist for WooCommerce <= 2.9.8 - Reflected Cross-Site Scripting
Night Mode <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
WP YouTube Live <= 1.8.2 - Admin+ Stored Cross-Site Scripting
WP Subtitle <= 3.4 - Cross-Site Scripting
Pricing Table Plugin <= 3.6 - Unauthenticated SQL Injection
Gmedia Photo Gallery < 1.20.0 - Authenticated (Admin+) Stored Cross-Site Scripting
WPCargo Track & Trace <= 6.9.4 - Reflected Cross-Site Scripting
ScrollReveal.js Effects <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Tracked Tweets <= 0.2.9 - Cross-Site Request Forgery to Cross-Site Scripting
WPCargo Track & Trace <= 6.9.4 - Admin+ Stored Cross Site Scripting
3xSocializer <= 0.98.22 - Authenticated SQL Injection
Call Now Button <= 1.1.1 - Reflected Cross-Site Scripting
Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosure
Easy Smooth Scroll Links <= 2.23.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Advanced Contact form 7 DB <= 1.8.7 - Stored Cross-Site Scripting
VikBooking Hotel Booking Engine & PMS <= 1.5.7 - Admin+ Stored Cross-Site Scripting
WPQA - Builder forms Addon For WordPress < 5.2 - Insecure Direct Object Reference to Profile Picture Deletion
VikBooking Hotel Booking Engine & PMS <= 1.5.8 - Arbitrary File Upload
VikBooking Hotel Booking Engine & PMS <= 1.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WPQA - Builder forms Addon For WordPress < 5.2 - Insecure Direct Object Reference to Private Message Disclosure
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.