Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryWP Project Manager <= 2.6.25 - Unauthenticated Sensitive Information Exposure
AnyClip Luminous Studio <= 1.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Frontend File Manager <= 23.2 - Missing Authorization
Findgo <= 1.3.55 - Cross-Site Request Forgery
Ibtana <= 1.2.5.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion
TZ PlusGallery <= 1.5.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Flexible PDF Invoices for WooCommerce & WordPress <= 6.0.13 - Cross-Site Request Forgery
HT Mega – Absolute Addons for WPBakery Page Builder <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Restaurant Menu <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Blog Designer <= 3.1.8 - Missing Authorization
Dialogity Free Live Chat <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
PowerFolio <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
ShrinkTheWeb (STW) Website Previews <= 2.8.5 - Cross-Site Request Forgery
WorkScout-Core < 1.7.06 - Cross-Site Request Forgery
WP System Information <= 1.5 - Authenticated (Subscriber+) Sensitive Information Exposure
Advanced Appointment Booking & Scheduling <= 2.5 - Cross-Site Request Forgery
Portfolio <= 2.58 - Authenticated (Author+) Stored Cross-Site Scripting
AffiliateWP – External Referral Links <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Image Hover Effects – Elementor Addon <= 1.4.4 - Missing Authorization
Oshine Core <= 1.5.5 - Missing Authorization
payOS <= 1.0.61 - Cross-Site Request Forgery
Nokri <= 1.6.4 - Cross-Site Request Forgery
Media Library Assistant <= 3.28 - Authenticated (Author+) Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.