Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 528
Blubrry PowerPress <= 11.16.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Custom HTML Pages <= 0.6.2 - Authenticated (Author+) Stored Cross-Site Scripting
Ninja Forms <= 3.14.9 - Unauthenticated Arbitrary Shortcode Execution
Xendit Payment <= 7.2.0 - Missing Authorization
Open User Map <= 1.4.46 - Authenticated (Contributor+) Stored Cross-Site Scripting
DHL for WooCommerce <= 4.0.0 - Unauthenticated Shipping Label Disclosure
SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'id' Parameter
GeoDirectory <= 2.8.167 - Information Exposure to Authenticated (Contributor+) User Email Disclosure
DHL for WooCommerce <= 4.0.0 - Insecure Direct Object Reference to Unauthenticated Shipping Label Download
GetGenie <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting
Anti Spam and list cleaner – AcyChecker <= 1.8.1 - Unauthenticated Stored Cross-Site Scripting
EmbedPress <= 4.6.0 - Unauthenticated Blind Server-Side Request Forgery
The GDPR Framework <= 2.3.0 - Missing Authorization
Gallery PhotoBlocks <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Easy Digital Downloads <= 3.6.9 - Authenticated (Admin) Arbitrary File Deletion
Nested Pages <= 3.2.14 - Authenticated (Editor+) Stored Cross-Site Scripting
REST API Log <= 1.7.0 - Missing Authorization to Unauthenticated Sensitive Log Data Disclosure
RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 - Missing Authorization
Ultimate Addons for Contact Form 7 <= 3.5.45 - Unauthenticated Stored Cross-Site Scripting
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.4 - Authenticated (Authenticated+) SQL Injection
Google Review Slider <= 18.4 - Cross-Site Request Forgery
GiveWP <= 4.16.3 - Unauthenticated Stored Cross-Site Scripting
FormCraft <= 3.9.15 - Unauthenticated Server-Side Request Forgery
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.