Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 8 950
Wyczyść filtrySEOPress 5.0.0 - 5.0.3 - Stored Cross-Site Scripting
WP Cerber < 8.9.3 - Access Bypass Control
Email Artillery (MASS EMAIL) <= 4.1 - Authenticated SQL Injection
Email Artillery (MASS EMAIL) <= 4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Smash Balloon Social Post Feed <= 2.19.1 - Unauthenticated Stored Cross-Site Scripting
Email Artillery (MASS EMAIL) <= 4.1 - Arbitrary File Upload
Email Artillery (MASS EMAIL) <= 4.1 - Reflected Cross-Site Scripting
WP Fountain <= 1.5.9 - Reflected Cross-Site Scripting
Plugmatter Pricing Table Lite <= 1.0.32 - Reflected Cross-Site Scripting
Smart Email Alerts <= 1.0.10 Reflected Cross-Site Scripting
miniOrange's Google Authenticator <= 5.4.39 - Cross-Site Scripting
Daily Prayer Time <= 2021.08.09 - Stored Cross-Site Scripting
Custom Post View Generator <= 0.4.6 - Reflected Cross-Site Scripting
Two Factor Authentication (2FA , MFA, OTP SMS and Email) <= 1.0.7 - Cross-Site Scripting
Titan Framework <= (Various Versions) - Reflected Cross-Site Scripting
SpeakOut! Email Petitions <= 2.13.1.1 - Cross-Site Scripting
WordPress Download Manager <= 3.2.12 - Cross-Site Request Forgery
Paid Membership, User Registration, User Profile & Restrict Content Plugin – ProfilePress <= 3.1.10 - Unauthenticated Cross-Site Scripting
Site Reviews <= 5.13.0 - Admin+ Stored Cross-Site Scripting
Paid Member Subscriptions <= 2.4.1 - Reflected Cross-Site Scripting
Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure
Membership & Content Restriction – Paid Member Subscriptions <= 2.4.1 - SQL Injection
Mapa Politico España < 3.7.0 - Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.