Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Subscriber+ Arbitrary Affiliate Links Creation
ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Authorization Bypass and Cross-Site Request Forgery
Opensea <= 1.0.2 - Cross-Site Scripting
Social comments by WpDevArt <= 2.4.9 - Admin+ Stored Cross-Site Scripting
Thank Me Later <= 3.3.4 - Admin+ Stored Cross-Site Scripting
Page Restriction WordPress <= 1.2.6 - Admin+ Stored Cross-Site Scripting
Menubar <= 5.7.2 - Reflected Cross-Site Scripting
Coming Soon by Supsystic <= 1.7.5 - Reflected Cross-Site Scripting
Text Hover <= 4.1 - Admin+ Stored Cross-Site Scripting
Pricing Table by Supsystic <= 1.9.4 - Reflected Cross-Site Scripting
Easy Digital Downloads <= 2.11.5 - Cross-Site Request Forgery
Easy Google Maps <= 1.9.31 - Reflected Cross-Site Scripting
DW Question & Answer Pro <= 1.3.6 - Missing Authorization Checks
Advanced Page Visit Counter <= 6.1.5 - Subscriber+ Blind SQL injection
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.39 - Cross-Site Scripting
BookingPress – Appointments Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.13 - SQL Injection
DW Question & Answer Pro <= 1.3.6 - Cross-Site Request Forgery
Nimble Page Builder <= 3.2.1 - Reflected Cross-Site Scripting
English WordPress Admin <= 1.5.1.1 - Unauthenticated Open Redirect
Floating Chat Widget: Contact Icons, Messages, Telegram, Email, SMS, Call Button – Chaty <= 2.8.3 - Admin+ Stored Cross-Site Scripting
Plausible Analytics <= 1.2.2 - Stored Cross-Site Scripting
Migration, Backup, Staging – WPvivid <= 0.9.70 - Authenticated Arbitrary File Read
UpdraftPlus WordPress Backup Plugin < 1.22.9 Reflected Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.