Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryQuill Forms <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Bold Page Builder <= 5.1.- - Authenticated (Contributor+) Stored Cross-Site Scripting
KB Support – WordPress Help Desk and Knowledge Base <= 1.6.6 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions
XLTab – Accordions and Tabs for Elementor Page Builder <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Guten Post Layout – An Advanced Post Grid Collection for WordPress Gutenberg <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
Jeg Elementor Kit <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Depicter Slider <= 3.2.2 - Authenticated (Editor+) Stored Cross-Site Scripting
WP Compress – Image Optimizer [All-In-One] <= 6.20.13 - Reflected Cross-Site Scripting
MaxSlider <= 1.2.3 - Authenticated (Contributor+) Local File Inclusion
RumbleTalk Live Group Chat – HTML5 <= 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
BSK Forms Blacklist <= 3.8.1 - Reflected Cross-Site Scripting
Gravity Forms Toolbar <= 1.7.0 - Reflected Cross-Site Scripting
Advanced Woo Labels <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting
Top Bar – PopUps – by WPOptin <= 2.0.1 - Unauthenticated Local File Inclusion
Create <= 2.9.1 - Authenticated (Author+) Stored Cross-Site Scripting
Iconize <= 1.2.4 - Authenticated (Admin+) Remote Code Execution
Broken Link Checker <= 2.4.0 - Reflected Cross-Site Scripting
Robokassa payment gateway for Woocommerce <= 1.6.1 - Reflected Cross-Site Scripting
Payflex Payment Gateway <= 2.6.1 - Open Redirect
Empowerment <= 1.0.2 - Authenticated (Contributor+) PHP Object Injection
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.3.9 - Authenticated (Admin+) SQL Injection
LiteSpeed Cache <= 6.1 - Unauthenticated Stored Cross-Site Scripting
EventPrime <= 4.0.4.5 - Open Redirect
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.