Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 670
Wyczyść filtryEmail Obfuscate Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Exit Notifier <= 1.10.4 - Reflected Cross-Site Scripting
Roles & Capabilities <= 1.1.9 - Reflected Cross-Site Scripting
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File Upload
PDF Thumbnail Generator <= 1.3 - Reflected Cross-Site Scripting
Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization
WP Simple Booking Calendar <= 2.0.10 - Reflected Cross-Site Scripting
WP Test Email <= 1.1.7 - Reflected Cross-Site Scripting
YITH Custom Login <= 1.7.3 - Reflected Cross-Site Scripting
Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget
Betheme | Responsive Multipurpose WordPress & WooCommerce Theme <= 27.5.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File
WPFactory Helper <= 1.7.0 - Reflected Cross-Site Scripting
WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization
Lucas String Replace <= 2.0.5 - Reflected Cross-Site Scripting
Flipping Cards <= 1.30 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Meta SEO <= 4.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Stream <= 4.0.1 - Cross-Site Request Forgery to Arbitrary Options Update
WP Meta SEO <= 4.5.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Product Slider for WooCommerce <= 1.13.50 - Reflected Cross-Site Scripting
Avada | Website Builder For WordPress & eCommerce <= 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via fusion_button Shortcode
Cron Jobs <= 1.2.9 - Reflected Cross-Site Scripting
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration
Spiffy Calendar <= 4.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.