Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryGTranslate <= 2.8.51 - Reflected Cross Site Scripting
LearnPress <= 3.2.6.8 - Privilege Escalation via accept-to-be-teacher action parameter
WP Mega Menu <= 1.3.6 - Unauthenticated Settings Update to Stored Cross-Site Scripting
LearnPress <= 3.2.6.8 - Authenticated Page Creation and Status Modification
Rank Math SEO <= 1.0.42.1 - Missing Authorization
Widget Settings Importer/Exporter Plugin <= 1.5.3 - Unauthorized Widget Import to Stored Cross-Site Scripting
TS Poll – Best Poll Plugin for WordPress <1.3.4 - Missing Authorization
Advanced Order Export for WooCommerce <= 3.1.3 - Cross-Site Scripting
Klarna Checkout for WooCommerce <= 2.0.9 - Arbitrary Plugin Installation, Activation and Deactivation
WP Lead Plus X <= 0.99 - Cross-Site Request Forgery
WP Lead Plus X <= 0.98 - Stored Cross-Site Scripting
WordPress Landing Page – Squeeze Page – Responsive Landing Page Builder Free – WP Lead Plus X <= 0.98 - Authenticated Stored Cross-Site Scripting
Car Rental System <= 1.3 - Unauthenticated Stored Cross-Site Scripting
Vanguard - Marketplace Digital Products PHP7 <= 2.1 - Cross-Site Scripting
Online Hotel Booking System Pro <= 1.1 - Cross-Site Scripting
OneTone <= 3.0.6 & OneTone Companion <= 1.1.1 - Stored Cross-Site Scripting
OneTone <= 3.0.6 & OneTone Companion <= 1.1.1 - Unauthenticated Settings Update
WP Last Modified Info <= 1.6.5 - Stored Cross-Site Scripting
WooCommerce Subscriptions <= 3.0.2 - Cross-Site Request Forgery
Contact Form 7 Datepicker <= 2.6.0 - Authenticated Stored Cross-Site Scripting
Login by Auth0 <= 3.11.3 - Cross-Site Request Forgery
MapPress Maps for WordPress <=2.53.8 - Authenticated Map Creation/Deletion to Stored Cross-Site Scripting & Remote Code Execution
Login by Auth0 <= 3.11.3 - Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.