Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 616
wp Hosting Performance Check <= 2.18.8 - Reflected Cross-Site Scripting
Saoshyant Page Builder <= 3.8 - Missing Authorization
StorePress <= 1.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
SureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post Disclosure
Slides & Presentations <= 0.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting
Element Pack Lite - Addons for Elementor <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Simple Locator <= 2.0.4 - Reflected Cross-Site Scripting
Multiple Carousel <= 2.0 - Unauthenticated SQL Injection
WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion
Content Blocks Builder <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
TRUSTist REVIEWer <= 2.0 - Reflected Cross-Site Scripting
Black Widgets For Elementor <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
News Ticker Widget for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
List Pages at Depth <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Competition Form <= 2.0 - Reflected Cross-Site Scripting
Tock Widget <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Live Flight Radar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Help Scout <= 6.5.6 - Missing Authorization
Donation Block For PayPal <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Github <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slotti Ajanvaraus <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Power Mag <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Biltorvet Dealer Tools <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.