Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryRemove Footer Credit <= 1.0.10 - Admin+ Stored Cross-Site Scripting
Mitsol Social Post Feed <= 1.10 - Authenticated (Admin+) Stored Cross-Site Scripting
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.30 - Reflected Cross-Site Scripting via lang & pid Parameters
Quiz And Survey Master <= 7.3.6 - Stored Cross-Site Scripting
Easy Drag And drop All Import : WP Ultimate CSV Importer < 6.4.1 - Missing Authorization Checks
Ibtana – WordPress Website Builder <= 1.1.4.7 - Missing Authorization to Stored Cross-Site Scripting
Powerkit < 2.5.9 - Cross-Site Request Forgery
AccessPress Themes and Plugin <= Various Versions - Missing Authorization to Arbitrary Plugin Deactivation/Activation
Mortgage Calculators WP < 1.53 - Authenticated Stored Cross-Site Scripting
AccessPress Themes and Plugin <= Various Versions - Cross-Site Request Forgery
Adaptive Images <= 0.6.68 - Reflected Cross-Site Scripting
WP-DownloadManager <= 1.68.6 - Stored Cross-Site Scripting
CLUEVO E-Learning Platform <= 1.8.0 - Authenticated Cross-Site Scripting
Ivory Search <= 5.4 - Multiple Admin+ Stored Cross-Site Scripting
Translate WordPress with GTranslate <= 2.9.6 - Reflected Cross-Site Scripting
All-in-one Floating Contact Form <= 2.0.3 - Reflected Cross-Site Scripting
SEUR Oficial < 1.7.2 - Authenticated Arbitrary File Download
WooCommerce – Store Exporter <= 2.7 - Reflected Cross-Site Scripting
Store Toolkit for WooCommerce <= 2.3.1 - Reflected Cross-Site Scripting
markdown-it < 1.3.2 - Uncontrolled Resource Consumption
Paid Memberships Pro <= 2.6.6 - Unauthenticated SQL Injection
Ultimate Product Catalog – WordPress Catalog Plugin <= 5.0.25 - Cross-Site Request Forgery
RVM - Responsive Vector Maps <= 6.4.1 - Subscriber+ Arbitrary File Read
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.