Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 609
Album and Image Gallery plus Lightbox <= 1.6.2 - Cross-Site Request Forgery
ShopLentor <= 2.5.1 - Cross-Site Request Forgery to Post Updates
Visualizer <= 3.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting
Mercado Pago payments for WooCommerce <= 6.3.1 - Cross-Site Request Forgery
GigPress <= 2.3.28 - Authenticated (Subscriber+) SQL Injection
CURCY <= 2.1.25 - Missing Authorization to Currency Exchange Retrieval
WP-Optimize <= 3.2.11 - Cross-Site Request Forgery
Quick Contact Form <= 8.0.3.1 - Cross-Site Request Forgery to Sensitive Information Disclosure
PayPal Brasil para WooCommerce <= 1.4.2 - Cross-Site Request Forgery
Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce <= 5.2.3 - Cross-Site Request Forgery
Icegram Express <= 5.5.2 - Unauthenticated CSV Injection
Google Maps CP <= 1.0.43 - Missing Authorization to Authenticated (Subscriber+) Feedback Form Submission
Quebely <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Option
Cost of Goods for WooCommerce <= 2.8.6 - Missing Authorization in save_costs
Icegram Collect <= 1.3.8 - Authenticated(Contributor+) Cross-Site Scripting via Shortcode
Quick Contact Form <= 8.0.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Pie Register <= 3.8.2.2 - Open Redirect
Auto Affiliate Links <= 6.2.1.5 - Authenticated (Subscriber+) Plugin Settings Change
Chained Quiz <= 1.3.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Monolit <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting
Ajax Search Lite <= 4.10.3 - Missing Authorization leading to Authenticated (Subscriber+) Sensitive Information Disclosure
Gutenberg Forms <= 2.2.8.3 - Authenticated(Subscriber+) Sensitive Information Disclosure
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.