Krytyczna
CVE-2025-30901
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 498
Wyczyść filtry
Wysoka
CVE-2025-30846
Restaurant Menu by MotoPress <= 2.4.4 - Authenticated (Contributor+) Local File Inclusion
Wysoka
CVE-2025-30785
Subscribe to Download Lite <= 1.2.9 - Authenticated (Contributor+) Local File Inclusion
Krytyczna
CVE-2025-30910
CM Download Manager <= 2.9.6 - Unauthenticated Arbitrary File Deletion
Wysoka
CVE-2025-30831
Themify Event Post <= 1.3.2 - Authenticated (Contributor+) Local File Inclusion
Średnia
CVE-2025-30914
Metform <= 3.9.2 - Authenticated (Admin+) Server-Side Request Forgery
Wysoka
CVE-2025-30911
RomethemeKit For Elementor <= 1.5.4 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Wysoka
CVE-2025-30890
Login Widget for Ultimate Member <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion
Wysoka
CVE-2025-30895
WpEvently <= 4.2.9 - Authenticated (Contributor+) Local File Inclusion
Wysoka
CVE-2025-2328
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated Arbitrary File Deletion
Wysoka
CVE-2025-1912
Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
Niska
CVE-2025-1911
Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
Średnia
CVE-2025-1769
Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
Średnia
CVE-2024-13411
Zapier for WordPress <= 1.5.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via updated_user Function
Średnia
CVE-2025-1310
Jobs for WordPress <= 2.7.11 - Authenticated (Subscriber+) Arbitrary File Read
Wysoka
CVE-2025-2007
Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Deletion
Wysoka
CVE-2025-2257
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.10 - Authenticated (Admin+) Command Injection
Średnia
CVE-2025-2109
WP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init Function
Wysoka
CVE-2025-2319
EZ SQL Reports Shortcode Widget and DB Backup 4.11.13 - 5.25.08 - Cross-Site Request Forgery to Remote Code Execution
Wysoka
CVE-2025-28893
Visual Text Editor <= 1.2.1 - Authenticated (Contributor+) Remote Code Execution
Krytyczna
CVE-2025-28916
Docpro <= 2.0.1 - Unauthenticated Local File Inclusion
Średnia
CVE-2025-1973
Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
Niska
CVE-2025-1972
Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
Wysoka
CVE-2025-1970
Export and Import Users and Customers <= 2.6.2 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.