Wysoka
CVE-2026-100510
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 406
Wysoka
CVE-2026-102391
JetFormBuilder — Dynamic Blocks Form Builder <= 3.6.5.4 - Unauthenticated Stored Cross-Site Scripting
Wysoka
CVE-2026-100512
Nested Pages <= 3.3.2 - Authenticated (Contributor+) PHP Object Injection
Wysoka
CVE-2026-97291
Schema & Structured Data for WP & AMP <= 1.66 - Authenticated (Contributor+) PHP Object Injection
Wysoka
CVE-2026-102377
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.46 - Authenticated (Contributor+) PHP Object Injection
Średnia
CVE-2026-102375
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.14 - Missing Authorization
Wysoka
CVE-2026-97265
JetEngine <= 3.8.15.3 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-97256
Page Builder by SiteOrigin <= 2.36.0 - Authenticated (Editor+) PHP Object Injection
Wysoka
CVE-2026-102385
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder <= 3.15.3 - Unauthenticated Stored Cross-Site Scripting
Wysoka
CVE-2026-97271
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-97259
Pay with Vipps and MobilePay for WooCommerce <= 6.2.4 - Unauthenticated Insecure Direct Object Reference
Krytyczna
CVE-2026-94389
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.5 - Unauthenticated Remote Code Execution
Wysoka
CVE-2026-94081
Persistent Login <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting
Wysoka
CVE-2026-100507
If-So Dynamic Content – Elementor & All Page Builders Personalization <= 1.10.1 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-102386
WP Photo Album Plus <= 9.3.02.003 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Wysoka
CVE-2026-102396
Ultimate Maps by Supsystic <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting
Wysoka
CVE-2026-102398
Smart Popup by Supsystic <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting
Wysoka
CVE-2026-102395
Easy Google Maps <= 1.14.6 - Unauthenticated Stored Cross-Site Scripting
Wysoka
CVE-2026-97289
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.6 - Unauthenticated Stored Cross-Site Scripting
Wysoka
CVE-2026-97272
Premmerce Permalink Manager for WooCommerce <= 2.3.13 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-97270
CMB2 <= 2.13.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Średnia
CVE-2026-97318
Giveaways and Contests by RafflePress <= 1.12.26 - Unauthenticated Open Redirect
Średnia
CVE-2026-97285
The Events Calendar <= 6.17.5 - Missing Authorization
Średnia
CVE-2026-62080
HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates <= 3.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.