Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 758
Infility Global <= 2.15.34 - Authenticated (Subscriber+) Arbitrary File Download
Barcode Scanner with Inventory & Order Manager <= 1.9.0 - Authenticated (Admin+) Arbitrary File Download
12 Step Meeting List <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP-Database-Optimizer-Tools <= 0.2 - Cross-Site Request Forgery
MaxCoach <= 3.2.5 - Unauthenticated Local File Inclusion
Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'
Embedder for Google Reviews <= 1.7.3 - Missing Authorization
Easy Elementor Addons <= 2.2.7 - Missing Authorization
Quttera Web Malware Scanner <= 3.5.1.41 - Authenticated (Administrator+) Server-Side Request Forgery
Thim Core <= 2.3.3 - Missing Authorization
Blocksy <= 2.1.6 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Add Custom Codes <= 4.80 - Authenticated (Contributor+) Remote Code Execution
Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.9 - Authenticated (Shop Manager+) Arbitrary Code Execution
WP Table Builder <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kadence WooCommerce Email Designer <= 1.5.16 - Authenticated (Shop Manager+) Arbitrary Options Update
WP Statistics <= 14.15 - Missing Authorization
WordLift <= 3.54.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Awesome Support <= 6.3.6 - Information Exposure
CM On Demand Search And Replace <= 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
CodeablePress <= 1.0.0 - Missing Authorization
Netty affected by MadeYouReset HTTP/2 DDoS vulnerability
drupal/layout_builder_perms - SA-CONTRIB-2025-097
drupal/alogin - SA-CONTRIB-2025-096
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.