Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 749
Eventin <= 4.0.26 - Missing Authorization to Unauthenticated Privilege Escalation
Graphina <= 3.0.4 - Cross-Site Request Forgery to Local File Inclusion
XT Event Widget for Social Events <= 1.1.7 - Authenticated (Contributor+) Local File Inclusion
Web Accessibility with Max Access <= 2.0.9 - Cross-Site Request Forgery
Better Search <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
GS Variation Swatches for WooCommerce <= 3.0.4 - Missing Authorization
DoFollow Case by Case <= 3.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Quran multilanguage Text & Audio <= 2.3.23 - Authenticated (Administrator+) Stored Cross-Site Scripting
Contextual Related Posts <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
LocateAndFilter <= 1.6.16 - Missing Authorization
Ebook Store <= 5.8009 - Authenticated (Contributor+) Stored Cross-Site Scripting
Product Time Countdown for WooCommerce <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Contribuinte Checkout <= 2.0.03 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Blocksy <= 2.0.97 - Missing Authorization
Beds24 Online Booking <= 2.0.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
GPT3 AI Content Writer <= 1.9.14 - Cross-Site Request Forgery
Envo Extra <= 1.9.9 - Missing Authorization
WP Gravity Forms Dynamics CRM <= 1.1.4 - Open Redirect
Ovation Elements <= 1.1.2 - Missing Authorization
Mail Mint <= 1.17.7 - Unauthenticated Sensitive Information Exposure
WP DPE-GES <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Display Remote Posts Block <= 1.1.0 - Authenticated (Contributor+) Server-Side Request Forgery
Listamester <= 2.3.6 - Cross-Site Request Forgery
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.