Średnia
CVE-2026-81284
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 534
Średnia
CVE-2026-16568
Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce <= 0.4.62 - Authenticated (Subscriber+) Insecure Direct Object Reference
Średnia
CVE-2026-81759
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.5.0 - Missing Authorization
Średnia
CVE-2026-78139
Notifima – WooCommerce Stock Manager, Inventory Management, Waitlist < 3.1.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Wysoka
CVE-2026-81285
Smush – Image Optimization, Compression, Lazy Load, WebP & CDN <= 4.2.0 - Unauthenticated Denial of Service
Średnia
CVE-2026-4246
ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter
Wysoka
CVE-2026-6286
Booking for Appointments and Events Calendar <= 2.2 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission
Średnia
CVE-2026-77017
Workeera – AI Job Board with Applicant Tracking System (ATS) < 1.0.6 - Authenticated (Subscriber+) Arbitrary File Read
Średnia
CVE-2026-81777
Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.0 - Unauthenticated Captcha Bypass
Średnia
CVE-2026-75797
AI Engine – The Chatbot, AI Framework & MCP for WordPress 3.3.3 - 3.7.1 - Authenticated (Subscriber+) Arbitrary File Read
Średnia
CVE-2026-76549
UpdraftPlus: WP Backup & Migration Plugin < 1.26.7 - Cross-Site Request Forgery
Wysoka
CVE-2026-77012
爱采集数据采集和发布插件 <= 1.0.0 - Unauthenticated Arbitrary File Read
Wysoka
CVE-2026-81760
JetEngine <= 3.8.14.2 - Unauthenticated Stored Cross-Site Scripting
Wysoka
CVE-2026-77018
Workeera – AI Job Board with Applicant Tracking System (ATS) < 1.0.6 - Authenticated (Subscriber+) Arbitrary File Upload
Średnia
CVE-2026-13159
Real Estate Papi <= 1.0.5 - Cross-Site Request Forgery
Średnia
CVE-2026-78138
Finale Lite – Sales Countdown Timer & Discount for WooCommerce < 2.21.0 - Authenticated (Subscriber+) Information Exposure
Średnia
CVE-2026-18233
MStore API – Create Native Android & iOS Apps On The Cloud < 4.21.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Completion
Średnia
CVE-2026-17520
Newsletters < 4.17 - Insufficient Authorization
Wysoka
CVE-2026-19223
Smush – Image Optimization, Compression, Lazy Load, WebP & CDN < 4.3.2 - Authenticated (Administrator+) Remote Code Execution
Średnia
CVE-2026-13414
CMP – Coming Soon & Maintenance Plugin by NiteoThemes < 4.1.18 - Missing Authorization to Unauthenticated Settings Change
Wysoka
CVE-2026-81291
Uncode <= 2.12.7 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-80311
Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions < 8.5.5 - Unauthenticated Insecure Direct Object Reference
Średnia
CVE-2026-81299
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website <= 2.5.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Wysoka
CVE-2026-81757
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.276 - Authenticated (Author+) Remote Code Execution
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.