Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryShortPixel Image Optimizer <= 6.3.4 - Authenticated (Contributor+) Settings Import/Export
Sale! Immigration law, Visa services support, Migration Agent Consulting <= 1.5.8 - Authenticated (Subscriber+) Privilege Escalation
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
XStore Core < 5.6 - Reflected Cross-Site Scripting
Memberlite Shortcodes <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WPC Smart Wishlist for WooCommerce <= 5.0.4 - Missing Authorization to Authenticated (Subscriber+) Information Exposure
Related Posts Lite <= 1.12 - Authenticated (Admin+) Stored Cross-Site Scripting
XX2WP Integration Tools <= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
GSpeech TTS – WordPress Text To Speech Plugin <= 3.17.13 - Authenticated (Admin+) SQL injection
Admin Management Xtended <= 2.5.1 - Missing Authorization
GoCache <= 1.3.6 - Missing Authorization
Binary MLM Plan <= 5.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Easy Post Submission <= 1.7.0 - Unauthenticated Sensitive Information Exposure
SureRank <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
Construction Light <= 1.6.7 - Missing Authorization
Front End Users <= 3.2.33 - Missing Authorization
tagDiv Cloud Library < 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Product Table For WooCommerce <= 1.2.4 - Authenticated (Contributor+) PHP Object Injection
MDTF <= 1.3.6 - Missing Authorization
Estatik <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Event post <= 5.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kallyas <= 4.22.0 - Missing Authorization
Event Tickets <= 5.26.3 - Missing Authorization
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.