Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 2 089
Wyczyść filtryArmania <= 1.4.8 - Unauthenticated Arbitrary Shortcode Execution
Zota <= 1.3.14 - Unauthenticated Local File Inclusion
Nika <= 1.2.14 - Unauthenticated Local File Inclusion
Diza <= 1.3.15 - Unauthenticated Local File Inclusion
Download Manager Addons for Elementor <= 1.3.0 - Unauthenticated SQL Injection
PDF for Elementor Forms + Drag And Drop Template Builder <= 6.3.1 - Missing Authorization
WPZOOM Addons for Elementor – Starter Templates & Widgets <= 1.3.2 - Unauthenticated Protected Post Exposure via ajax_post_grid_load_more
Miraculous Elementor <= 2.0.7 - Authenticated (Subscriber+) Privilege Escalation
Themesflat Elementor <= 1.0.1 - Unauthenticated PHP Object Injection
ElementInvader Addons for Elementor <= 1.4.1 - Missing Authorization
Portfolio Builder <= 1.2.5 - Unauthenticated Local File Inclusion
Eleblog – Elementor Blog And Magazine Addons <= 2.0.3 - Unauthenticated Local File Inclusion
TopperPack – Complete Elementor Addons, Theme & CPT Builder <= 1.2.1 - Unauthenticated Local File Inclusion
Besa <= 2.3.15 - Unauthenticated Local File Inclusion
Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field
Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget
News Kit Addons For Elementor <= 1.4.2 - Missing Authorization
Enter Addons <= 2.3.2 - Cross-Site Request Forgery
FormsDB – Save Elementor Forms to Google Sheets & Post Type <= 2.1.3 - Missing Authorization
Zita Site Library for Elementor <= 1.6.6 - Cross-Site Request Forgery
Simple calendar for Elementor <= 1.6.6 - Missing Authorization to Unauthenticated Arbitrary Calendar Entry Deletion
Interactions – Create Interactive Experiences in the Block Editor <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.