Średnia
CVE-2025-12469
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 8 950
Wyczyść filtry
Średnia
CVE-2025-11373
Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type Upload
Wysoka
CVE-2025-12139
File Manager for Google Drive – Integrate Google Drive with WordPress <= 1.5.3 - Unauthenticated Sensitive Information Exposure
Krytyczna
CVE-2025-11749
AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation
Średnia
CVE-2025-11835
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.16.4 - Missing Authorization to Unauthenticated Arbitrary Member Subscription Auto Renewal
Średnia
CVE-2025-8871
Everest Forms (Pro) <= 1.9.7 - Unauthenticated PHP Object Injection via PHAR Deserialization in Form Signature
Średnia
CVE-2025-11758
All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0.3 - Missing Authorization to Page Creation and Information Exposure
Wysoka
CVE-2025-11890
Crypto Payment Gateway with Payeer for WooCommerce <= 1.0.3 - Unauthenticated Payment Bypass
Średnia
CVE-2025-12456
Centangle Team Showcase <= 1.0.0 - Cross-Site Request Forgery To Plugin's Settings Modification And Stored Cross-Site Scripting
Średnia
CVE-2025-12156
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One 2.0.7 - 2.3.4 - Missing Authorization to Authenticated (Subscriber+) Post Creation
Wysoka
CVE-2025-11704
Elegance Menu <= 1.9 - Authenticated (Contributor+) Local File Inclusion
Wysoka
CVE-2025-63003
North <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion
Wysoka
CVE-2025-12394
Backup Migration <= 1.4.9 - Information Exposure to Unauthenticated Back-up Download
Krytyczna
CVE-2025-12493
ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'
Średnia
CVE-2025-67535
Maps <= 4.8.6 - Authenticated (Administrator+) PHP Object Injection
Wysoka
CVE-2025-64216
SmartMag <= 10.3.0 - Authenticated (Contributor+) Local File Inclusion
Krytyczna
CVE-2025-8900
Doccure Core < 1.5.4 - Unauthenticated Privilege Escalation
Wysoka
CVE-2025-6574
Service Finder Bookings < 6.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Wysoka
CVE-2025-11995
Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting
Krytyczna
CVE-2025-11833
Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.0 - Missing Authorization to Account Takeover via Unauthenticated Email Log Disclosure
Średnia
CVE-2025-11816
Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.5.1 - Missing Authorization to Unauthenticated API Disconnect
Wysoka
CVE-2025-11920
WPCOM Member <= 1.7.14 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Krytyczna
CVE-2025-11127
Mstoreapp Mobile <= 2.08 & <= 9.0.1 - Unauthenticated Privilege Escalation
Średnia
CVE-2025-11975
FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) <= 1.1.23.0 - Missing Authorization to Authenticated (Subscriber+) Sync Rule Creation
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.