Krytyczna
CVE-2026-94503
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 436
Średnia
CVE-2026-32570
Progressify - Progressive Web App (PWA) <= 1.6.0 - Unauthenticated Cross-Site Scripting
Wysoka
CVE-2026-32569
WP Media folder <= 6.2.2 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-103066
WP BASE Booking of Appointments, Services and Events <= 6.4.0 - Authenticated (Subscriber+) SQL Injection
Wysoka
CVE-2026-100511
VK Google Job Posting Manager <= 1.3.1 - Authenticated (Contributor+) PHP Object Injection
Wysoka
CVE-2026-100506
WP Spell Check <= 12.1 - Authenticated (Author+) PHP Object Injection
Wysoka
CVE-2026-97257
Simple Event Planner <= 1.5.7 - Authenticated (Contributor+) PHP Object Injection
Wysoka
CVE-2026-93617
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers <= 3.7.1 - Authenticated (Custom Role+) PHP Object Injection
Wysoka
CVE-2026-103348
Export All Posts, Products, Orders & Users | WP Ultimate Exporter | WordPress CSV Export <= 3.0 - Authenticated (Custom Role+) PHP Object Injection
Średnia
CVE-2026-103349
Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce <= 13.5.7 - Authenticated (Shop Manager+) PHP Object Injection
Średnia
CVE-2026-97303
Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more <= 3.0.2 - Missing Authorization
Wysoka
CVE-2026-103352
WP BASE Booking of Appointments, Services and Events <= 6.4.0 - Unauthenticated SQL Injection
Wysoka
CVE-2026-97283
Advanced Post Manager <= 4.5.5 - Authenticated (Contributor+) PHP Object Injection
Średnia
CVE-2026-97309
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1226 - Authenticated (Subscriber+) Information Exposure
Średnia
CVE-2026-97070
Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Templates <= 2.2.23 - Unauthenticated Insecure Direct Object Reference
Średnia
CVE-2026-97305
Hyve Lite – AI Chatbot Trained on WordPress Posts, Pages, Products & More with ChatGPT <= 2.0.2 - Unauthenticated Insecure Direct Object Reference
Średnia
CVE-2026-103334
Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.24 - Unauthenticated Information Exposure
Średnia
CVE-2026-97304
Timetics – Appointment Booking Calendar & Scheduling <= 1.0.63 - Missing Authorization
Średnia
CVE-2026-100515
Photo Reviews for WooCommerce <= 1.2.30 - Reflected Cross-Site Scripting
Wysoka
CVE-2026-103085
WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory <= 2.9.20 - Unauthenticated Privilege Escalation
Średnia
CVE-2026-103086
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP <= 1.2.74 - Missing Authorization
Średnia
CVE-2026-100509
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1225 - Authenticated (Customer+) Stored Cross-Site Scripting
Średnia
CVE-2026-102383
Lookzy LookBook for WooCommerce <= 1.1.14 - Missing Authorization
Wysoka
CVE-2026-94415
Betheme <= 28.5.8 - Unauthenticated Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.