Wysoka
CVE-2025-1707
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 498
Wyczyść filtry
Wysoka
CVE-2025-28915
ThemeEgg ToolKit <= 1.2.9 - Authenticated (Administrator+) Arbitrary File Upload
Średnia
CVE-2024-13838
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via Webhook
Krytyczna
CVE-2025-1661
HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion
Wysoka
CVE-2024-13908
SMTP by BestWebSoft <= 1.1.9 - Authenticated (Administrator+) Arbitrary File Upload
Wysoka
CVE-2024-13359
Product Input Fields for WooCommerce <= 1.12.0 - Unauthenticated Limited File Upload
Wysoka
CVE-2024-13882
Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload
Wysoka
CVE-2024-11640
VikRentCar Car Rental Management System <= 1.4.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload
Średnia
CVE-2024-13857
WPGet API <= 2.2.10 - Authenticated (Administrator+) Server-Side Request Forgery
Wysoka
CVE-2024-10804
Ultimate Video Player <= 10.0 - Unauthenticated Arbitrary File Download
Średnia
CVE-2024-13904
Platform.ly for WooCommerce <= 1.1.6 - Unauthenticated Blind Server-Side Request Forgery
Wysoka
8b11a4ce-9e11-4c4b-8c61-3de05750f568
Solace Extra <= 1.3.0 - Authenticated (Subscriber+) Arbitrary File Upload
Wysoka
CVE-2024-12036
CS Framework <= 7.1 - Authenticated (Subscriber+) Arbitrary File Read
Wysoka
CVE-2024-12035
CS Framework <= 7.0 - Authenticated (Subscriber+) Arbitrary File Deletion
Średnia
CVE-2024-13897
Moving Media Library <= 1.22 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Deletion
Wysoka
CVE-2024-13618
Downloable by American Osteopathic Association <= 0.1.0 - Unauthenticated Server-Side Request Forgery
Wysoka
CVE-2024-13617
Downloable by American Osteopathic Association <= 0.1.0 - Unauthenticated Arbitrary File Download
Średnia
CVE-2024-13780
Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Directory Deletion
Krytyczna
CVE-2025-1307
Newscrunch <= 1.8.4 - Authenticated (Subscriber+) Arbitrary File Upload
Wysoka
CVE-2024-12544
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 1.12.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via SurveyJS_DeleteFile
Średnia
CVE-2025-1730
Simple Download Counter <= 2.0 - Authenticated (Author+) Arbitrary File Read
Wysoka
CVE-2024-13910
Database Backup and check Tables Automated With Scheduler 2024 <= 2.36 - Authenticated (Administrator+) Arbitrary File Deletion
Średnia
CVE-2024-13697
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nice_links
Średnia
CVE-2025-1662
URL Media Uploader <= 1.0.0 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebinding
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.