Średnia
CVE-2026-75980
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 498
Wyczyść filtry
Wysoka
CVE-2026-19952
Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag
Krytyczna
CVE-2026-75865
WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint
Wysoka
CVE-2026-82852
MapSVG – Vector maps, Image maps, Google Maps <= 8.15.0 - Unauthenticated Server-Side Request Forgery
Średnia
CVE-2026-17563
User Frontend <= 4.3.10 - Missing Authorization to Unauthenticated Post Creation
Wysoka
CVE-2026-81766
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) < 9.8.0 - Authenticated (Custom Role+) Remote Code Execution
Średnia
CVE-2026-77794
RegistrationMagic <= 6.0.9.8 - Unauthenticated Payment Bypass
Wysoka
CVE-2026-16947
Total processing card payments for WooCommerce <= 7.3 - Unauthenticated Server-Side Request Forgery
Krytyczna
CVE-2026-82970
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode <= 4.4.1 - Unauthenticated Arbitrary File Upload
Wysoka
CVE-2026-66047
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.17.1 - Unauthenticated Arbitrary Plugin Installation via Brute Force
Wysoka
CVE-2026-10195
FS Poster <= 8.0.1 - Authenticated (Subscriber+) Remote Code Execution via FFmpeg Path Setting
Średnia
CVE-2026-77793
RegistrationMagic <= 6.0.9.8 - Unauthenticated Payment Bypass
Średnia
CVE-2026-16966
Solace Extra < 1.7.0 - Missing Authorization to Unauthenticated Unpublished Site Builder Content Disclosure
Wysoka
CVE-2026-19722
WPvivid — Backup, Migration & Staging < 0.9.133 - Authenticated (Administrator+) Remote Code Execution
Średnia
CVE-2026-82607
Profile Builder < 3.16.1 - Unauthenticated Limited File Upload
Średnia
CVE-2026-16600
SmartAIPress <= 1.2.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Wysoka
CVE-2026-17565
Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates < 2.7.2 - Unauthenticated Server-Side Request Forgery
Wysoka
CVE-2026-74851
Pods – Custom Content Types and Fields < 3.3.9.1 - Authenticated (Author+) Remote Code Execution
Krytyczna
CVE-2026-12513
Shared Files Pro < 1.7.68 & Shared Files Free < 1.7.67 - Unauthenticated Arbitrary File Deletion
Średnia
CVE-2026-19093
Tutor LMS – eLearning and online course solution < 4.0.6 - Authenticated (Custom Role+) Arbitrary File Read
Krytyczna
CVE-2026-81780
Hash Form – Drag & Drop Form Builder <= 1.4.2 - Unauthenticated Arbitrary File Upload
Średnia
CVE-2026-19715
WP OAuth Server ( Login with WordPress ) < 6.3.1 - Unauthenticated Information Exposure
Krytyczna
CVE-2026-82222
GiveWP – Donation Plugin and Fundraising Platform <= 4.16.7.1 - Unauthenticated PHP Object Injection to Remote Code Execution
Krytyczna
CVE-2026-14494
Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.