Średnia
CVE-2026-57333
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 41 456
Wyczyść filtry
Średnia
CVE-2026-12972
PayPlus Payment Gateway <= 8.2.1 - Unauthenticated Order Payment Manipulation
Wysoka
CVE-2026-57344
Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-9833
Tag Groups <= 2.1.0 - Reflected Cross-Site Scripting
Średnia
CVE-2026-57690
Werkstatt - Creative Portfolio WordPress Theme <= 4.7.2 - Cross-Site Request Forgery
Średnia
CVE-2026-57335
Quads Ads Manager for Google AdSense <= 3.0.3 - Missing Authorization
Średnia
CVE-2026-57334
User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration <= 4.3.7 - Missing Authorization
Wysoka
CVE-2026-57345
Internal Links Manager <= 3.0.3 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-57676
Simple User Avatar <= 4.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Średnia
CVE-2026-27435
Woffice CRM <= 5.4.32 - Missing Authorization
Średnia
CVE-2026-27425
Automotive Listings <= 18.6 - Reflected Cross-Site Scripting
Średnia
CVE-2025-69094
Unicamp - University and College WordPress Theme <= 2.2.2 - Authenticated (Subscriber+) SQL Injection
Wysoka
CVE-2025-58902
Lighthouse <= 1.2.12 - Unauthenticated Local File Inclusion
Krytyczna
CVE-2026-57624
Blocksy Companion Pro <= 2.1.46 - Unauthenticated Remote Code Execution
Średnia
CVE-2026-39448
NOWPayments for WooCommerce – Crypto Payment Gateway <= 1.4.0 - Missing Authorization
Wysoka
CVE-2026-8095
Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Arbitrary File Deletion
Średnia
CVE-2026-57756
nicen-localize-image <= 1.4.9 - Authenticated (Contributor+) SQL Injection
Średnia
CVE-2026-8383
LearnPress <= 4.3.6 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure
Średnia
CVE-2026-9242
RegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request
Średnia
CVE-2026-12432
Stripe Payment Forms by WP Full Pay <= 8.4.3 - Missing Authorization to Unauthenticated Payment Record Manipulation via 'paymentIntentId' Parameter
Średnia
CVE-2026-9233
Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action
Średnia
CVE-2026-11364
Product Specifications for Woocommerce <= 0.8.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attribute/Group Creation, Modification, and Deletion via 'dwps_modify_groups' and 'dwps_modify_attributes' AJAX Actions
Średnia
CVE-2026-11773
Masteriyo LMS <= 2.2.1 - Missing Authorization to Authenticated (Student+) Arbitrary Course Announcement Modification
Średnia
CVE-2026-11987
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Information Disclosure via 'id' Parameter
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.