Średnia
CVE-2026-84024
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 8 950
Wyczyść filtry
Średnia
CVE-2026-87918
WPBot – AI ChatBot for Live Support, Lead Generation, WordPress Automation, AI Services < 8.5.7 - Missing Authorization
Wysoka
CVE-2026-85200
GEO my WP <= 4.5.5.3 - Unauthenticated Local File Inclusion
Wysoka
CVE-2026-78175
Tutor LMS <= 4.0.7 - Authenticated (Subscriber+) PHP Object Injection to Remote Code Execution
Średnia
CVE-2026-11355
DT LMS <= 1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via Multiple AJAX Actions
Wysoka
CVE-2026-16482
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter
Krytyczna
CVE-2026-78159
The Events Calendar <= 6.17.3 - Unauthenticated Code Injection to Remote Code Execution via Widget 'classes' Map Callable Invocation
Wysoka
CVE-2026-62107
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 3.4.0 - Unauthenticated PHP Object Injection
Wysoka
CVE-2026-15451
MemberPress Corporate Accounts <= 1.5.39 - Authenticated (Subscriber+) Privilege Escalation via Mass Assignment in Sub-Account Creation
Wysoka
CVE-2026-80072
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder < 5.2.8 - Unauthenticated Open Redirect
Wysoka
CVE-2026-62103
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.6.0 - Unauthenticated PHP Object Injection
Średnia
CVE-2026-74925
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions 5.0.0 - 5.0.15 - Authenticated (Custom Role+) Privilege Escalation
Średnia
CVE-2026-89050
Quads Ads Manager for Google AdSense 3.0.4 - Authenticated (Subscriber+) Payment Bypass to Unpaid Ad Placement Acquisition
Średnia
CVE-2026-85678
AI Builder – Generate pages, blocks, images & translate with AI 2.4.1 - 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Średnia
CVE-2026-17585
Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE Oracle in 'wpr_keyword' Parameter
Wysoka
CVE-2026-82925
Site Reviews 7.2.2 - 8.2.2 - Unauthenticated PHP Object Injection
Wysoka
CVE-2026-62105
ThemeREX Addons < 2.45.0 - Unauthenticated PHP Object Injection
Średnia
CVE-2026-86782
Visualizer – Tables & Charts Manager with Built-in AI Generator 4.0.0 - 4.0.5 - Authenticated (Contributor+) Insecure Direct Object Reference
Średnia
CVE-2026-62113
Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated <= 4.10.0 - Authenticated (Contributor+) Insecure Direct Object Reference
Średnia
CVE-2026-11446
Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization
Wysoka
CVE-2026-81754
Vigilant <= 2.10.2 - Unauthenticated Stored Cross-Site Scripting
Wysoka
CVE-2026-18579
WP Photo Album Plus <= 9.2.08.003 - Unauthenticated Stored Cross-Site Scripting
Wysoka
CVE-2026-15462
Sticky Chat Widget <= 1.4.2 - Unauthenticated SQL Injection
Średnia
CVE-2026-18964
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button <= 3.5.9 - Reflected Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.