Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 073
Wyczyść filtryRehub <= 19.9.9.1 - Unauthenticated Information Exposure
g-FFL Cockpit <= 1.7.1 - Missing Authorization to Unauthenticated Information Exposure
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection via ORDER BY Clause
SendPulse Email Marketing Newsletter <= 2.2.1 - Authenticated (Subscriber+) Information Exposure
Portfolio and Projects <= 1.5.5 - Authenticated (Contributor+) Information Exposure
My auctions allegro <= 3.6.32 - Unauthenticated SQL Injection via auction_id
EPROLO Dropshipping <= 2.3.1 - Missing Authorization to Authenticated (Subscriber+) Tracking Data Modification
SurveyFunnel – Survey Plugin for WordPress <= 1.1.5 - Unauthenticated Information Exposure
Google Analytics Events <= 2.8.2 - Unauthenticated Information Exposure
User Spam Remover <= 1.1 - Unauthenticated Information Exposure
Premium Addons for Elementor <= 4.11.53 - Unauthenticated Information Exposure
Image Cleanup <= 1.9.2 - Unauthenticated Information Exposure
AI CoPilot <= 1.2.7 - Authenticated (Contributor+) Information Exposure
WebP Express <= 0.25.9 - Unauthenticated Information Exposure
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection
FluentCart A New Era of eCommerce <= 1.3.1 - Authenticated (Administrator+) SQL Injection via 'groupKey' Parameter
MxChat – AI Chatbot for WordPress <= 2.5.5 - Unauthenticated Information Exposure
WP Directory Kit <= 1.4.6 - Authenticated (Admin+) SQL Injection
VikRentCar Car Rental Management System <= 1.4.4 - Authenticated (Author+) SQL Injection via 'month' Parameter
Zigaform <= 7.6.5 - Unauthenticated Form Submission Data Disclosure in rocket_front_payment_seesummary AJAX Endpoint
Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL Injection
Masteriyo - LMS <= 2.0.3 - Authenticated (Subscriber+) Sensitive Information Exposure
KiviCare <= 3.6.13 - Authenticated (Patient+) SQL Injection
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.