Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 073
Wyczyść filtryForm Maker by 10Web <= 1.15.43 - Authenticated (Adminsitrator+) SQL Injection via 'groupids' Parameter
Form Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' Parameter
Event Koi Lite <= 1.3.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via REST API Endpoints
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.3 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Order Modification via Multiple AJAX Handlers
Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 5.4.0 - Unauthenticated SQL Injection
GIFT4U – Gift Cards All in One for Woo <= 1.0.10 - Unauthenticated SQL Injection
wpDataTables (Premium) <= 7.4 - Unauthenticated SQL Injection
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.162 - Unauthenticated SQL Injection
WP Photo Album Plus <= 9.1.13.005 - Unauthenticated SQL Injection
SlimStat Analytics <= 5.4.11 - Authenticated (Subscriber+) SQL Injection
SureDash – Community, Courses & Member Dashboard <= 1.8.0 - Authenticated (Subscriber+) SQL Injection
FireBox Popups <= 3.1.7 - Unauthenticated Sensitive Information Exposure in 'form_id' Parameter
Cargo Shipping Location for WooCommerce <= 5.6 - Unauthenticated SQL Injection
Visual Link Preview <= 2.3.1 - Authenticated (Subscriber+) Sensitive Information Exposure
Motors – Car Dealership & Classified Listings Plugin <= 1.4.109 - Unauthenticated SQL Injection
Real Estate 7 WordPress <= 3.5.9 - Unauthenticated SQL Injection
SALESmanago & Leadoo <= 3.11.2 - Authenticated (Subscriber+) SQL Injection
Object Cache 4 everyone <= 2.3.2 - Information Exposure
WP Travel Gutenberg Blocks <= 3.9.4 - Unauthenticated SQL Injection
JetBooking <= 4.0.4.1 - Unauthenticated SQL Injection
Quads Ads Manager for Google AdSense <= 3.0.3 - Unauthenticated Information Exposure
Wp EMember < v10.9.4 - Unauthenticated SQL Injection
JobSearch WP Job Board <= 3.2.9 - Unauthenticated SQL Injection
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.