Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 494
Wyczyść filtryPost SMTP <= 3.0.2 - Unauthenticated Stored Cross-Site Scripting
1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Cross-Site Request Forgery to Backup Process Cancellation
1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Unauthenticated Sensitive Information Exposure via Database Backup in class-ocm-backup.php
Keep Backup Daily <= 2.1.0 - Authenticated (Admin+) Arbitrary File Download
ZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Zox News <= 3.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Modification
Royal Core <= 2.9.2 - Authenticated (Subscriber+) Arbitrary Options Update
Zox News <= 3.16.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
UpdraftPlus - Backup/Restore <= 1.24.12 - Reflected Cross-Site Scripting
Htaccess File Editor <= 1.0.19 - Unauthenticated Information Exposure
WebToffee WP Backup and Migration <= 1.5.3 - Unauthenticated Sensitive Information Exposure
WP Database Backup – Unlimited Database & Files Backup by Backup for WP <= 7.3 - Unauthenticated Database Back-Up Exposure
Post SMTP <= 2.9.11 - Missing Authorization via regenerate_qrcode()
Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'
UpdraftPlus: WP Backup & Migration Plugin 1.23.8 - 1.24.11 - Unauthenticated PHP Object Injection
WPvivid Backup and Migration <= 0.9.106 - Missing Authorization
Database Backup and check Tables Automated With Scheduler 2024 <= 2.32 - Authenticated (Admin+) Arbitrary File Read
WP SuperBackup <= 2.3.3 - Missing Authorization to Unauthenticated Back-Up File Download
WP SuperBackup <= 2.3.3 - Authenticated (Subscriber+) PHP Object Injection
WP SuperBackup <= 2.3.3 - Missing Authorization
WP SuperBackup <= 2.3.3 - Reflected Cross-Site Scripting
WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload
Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.