Product update: Dynamic API Scanning, Recommendations & Classifications, and more
We know the importance of staying ahead of threats. At Detectify, we’re committed to providing you with the tools you need to secure your applications …
Newly added security tests, October 4, 2017: WordPress and Magento vulnerabilities
Detectify
This week’s update brings more WordPress plugin vulnerabilities that Detectify now checks for as well as two Magento security tests.
We have added:
- WordPress Authenticated (2.9.2 – 4.8.1) Open Redirect
- WordPress gallery-album Authenticated SQL Injection
- WordPress theme-my-login Authentication Bypass
- WordPress simple-membership Authenticated XSS
- WordPress my-wp-translate Authenticated XSS
- WordPress duplicate-page Authenticated XSS
- WordPress my-tickets Authenticated XSS
- WordPress wp-members Authenticated XSS
- WordPress megamenu Authenticated XSS
- WordPress caldera-forms Flash XSS
- WordPress use-any-font CSRF
- Magento SUPEE-6285 (APPSEC-996) Orders Disclosure
- Magento SUPEE-5994 (APPSEC-977) Admin Path Disclosure
Check out more content
Infinite payloads? The future of API Testing with dynamic fuzzing
What if we told you that our newly released API Scanner has 922 quintillion payloads for a single type of vulnerability test? A quintillion is …
