Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 647
Orbisius Simple Notice <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Thim Elementor Kit <= 1.2.8 - Missing Authorization
LearnDash LMS <= 4.20.0.1 - Missing Authorization
SERPed.net <= 4.4 - Authenticated (Contributor+) SQL Injection
Call Now Button <= 1.4.13 - Cross-Site Request Forgery
Gutenberg Blocks by Kadence Blocks <= 3.3.1 - Missing Authorization
Download IP2Location Country Blocker <= 2.38.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Popup Box <= 3.2.4 - Cross-Site Request Forgery
Essential Real Estate <= 5.1.8 - Cross-Site Request Forgery
WooCommerce Product Table Lite <= 3.8.7 - Missing Authorization
Magic the Gathering Card Tooltips <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Plethora Plugins Tabs + Accordions <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Maps Plugin using Google Maps for WordPress – WP Google Map <= 1.9.3 - Maps Plugin using Google Maps for WordPress – WP Google Map <= 1.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Markers
Internal Links Manager <= 2.5.2 - Missing Authorization
Print Barcode Labels for your WooCommerce products/orders <= 3.4.10 - Missing Authorization
Build Private Store For Woocommerce <= 1.0 - Missing Authorization
Listamester <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Product Size Charts Plugin for WooCommerce <= 2.4.5 - Missing Authorization
WP Ultimate Exporter <= 2.9 - Authenticated (Admin+) Arbitrary File Read
Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.10.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Sticky Buttons <= 4.1.1 - Cross-Site Request Forgery to Settings Update
Comment Edit Core – Simple Comment Editing <= 3.0.33 - Authenticated (Admin+) Server-Side Request Forgery
Job Board Manager <= 2.1.59 - Cross-Site Request Forgery
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.