Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtryUDesign Core <= 4.14.0 - Reflected Cross-Site Scripting
Kallyas <= 4.22.0 - Authenticated (Contributor+) Arbitrary File Upload
UDesign Core <= 4.14.0 - Missing Authorization
Travel Booking WordPress Theme < 3.2.3 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Travel Booking WordPress Theme < 3.2.3 - Reflected Cross-Site Scripting
Recent Posts Widget Extended <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via rpwe Shortcode
SKT Addons for Elementor <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Admin Menu Editor <= 1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via placeholder Parameter
aThemes Addons for Elementor Lite <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Smart Table Builder <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
StreamWeasels Kick Integration <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via vodsChannel Parameter
Content Views <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Grid and List Widgets
Optio Dentistry <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Easy Social Feed – Social Photos Gallery – Post Feed – Like Box <= 6.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Html Social share buttons <= 2.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Rehub <= 19.9.7 - Unauthenticated Arbitrary Shortcode Execution via re_filterpost
Rehub <= 19.9.7 - Unauthenticated Password Protected Post Disclosure
Bulk Watermark <= 1.6.10 - Cross-Site Request Forgery
Instant Locations <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Ray Enterprise Translation <= 1.7.1 - Missing Authorization
Simple Text Slider <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Mail <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Price Calculator <= 1.3 - Missing Authorization
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.