Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 51
Wyczyść filtryJNews - WordPress Newspaper Magazine Blog AMP Theme <= 11.6.6 - Unauthorized User Registration
Magazine Blocks <= 1.3.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Magazine Blocks <= 1.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid <= 1.3.14 - Reflected Cross-Site Scripting
Elespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder. One Click Import: No Coding Required! <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Horizontal Nav Menu Widget
tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode
Magazine Blocks <= 1.3.6 - Authenticated (Author+) Stored Cross-Site Scripting
Newspaper <= 12.6.5 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
WooHoo Newspaper Magazine Theme <= 2.5.3 - Cross-Site Request Forgery to Settings Update
tagDiv Cloud Library < 2.7 - Missing Authorization to Arbitrary User Metadata Update
tagDiv Composer < 3.5 - Unauthorized Account Access and Privilege Escalation
Newspaper <= 11.5.1 - Reflected Cross-Site Scripting
Newspaper <= 11.5.1 - Reflected Cross-Site Scripting
Newsmag < 5.0 - Reflected Cross-Site Scripting
Newspaper Lite < 11.0 - Reflected Cross-Site Scripting
Jannah <= 5.4.4 - Reflected Cross-Site Scripting
Jannah - Newspaper Magazine News BuddyPress AMP < 5.4.4 - Reflected Cross-Site Scripting
JNews - WordPress Newspaper Magazine Blog AMP Theme < 8.0.6 - Reflected Cross-Site Scripting
Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation
Epsilon Framework Themes (Various Versions) - Function Injection
15Zine | Magazine Newspaper Blog News WordPress Theme < 3.3.0 - Reflected Cross-Site Scripting
Newspaper <= 10.3.3 - Reflected Cross-Site Scripting
Newspaper < 9.2.2 - Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.