Krytyczna
CVE-2024-13742
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 8 950
Wyczyść filtry
Wysoka
CVE-2024-12269
Safe Ai Malware Protection for WP <= 1.0.17 - Missing Authorization to Unauthenticated Database Export
Krytyczna
CVE-2025-0493
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.14 - Unauthenticated Limited Local File Inclusion
Średnia
CVE-2024-13623
Order Export for WooCommerce <= 3.24 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Średnia
CVE-2024-13470
Ninja Forms – The Contact Form Builder That Grows With You <= 3.8.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Średnia
CVE-2024-13457
Event Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information Exposure
Średnia
CVE-2024-12861
W2S – Migrate WooCommerce to Shopify <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Wysoka
CVE-2024-13707
WP Image Uploader <= 1.0.1 - Cross-Site Request Forgery to Arbitrary File Deletion
Wysoka
CVE-2024-13720
WP Image Uploader <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
Średnia
CVE-2025-24688
WP Mailster <= 1.8.20.0 - Reflected Cross-Site Scripting
Średnia
CVE-2024-13521
MailUp Auto Subscription <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Krytyczna
CVE-2025-24685
Morkva UA Shipping <= 1.0.18 - Unauthenticated Local File Inclusion
Wysoka
CVE-2025-24782
Post Grid, Slider & Carousel Ultimate <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion
Wysoka
CVE-2025-24734
Better Find and Replace <= 1.6.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Wysoka
CVE-2024-11936
Zox News <= 3.16.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Średnia
CVE-2024-12113
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion
Średnia
CVE-2024-13550
ABC Notation <= 6.1.3 - Authenticated (Contributor+) Arbitrary File Read
Średnia
CVE-2024-13467
WP Contact Form7 Email Spam Blocker <= 1.0.0 - Reflected Cross-Site Scripting
Średnia
CVE-2024-13458
WordPress SEO Friendly Accordion FAQ with AI assisted content generation <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wysoka
CVE-2025-24650
Tourfic <= 2.15.3 - Authenticated (Admin+) Arbitrary File Upload
Wysoka
CVE-2024-13562
Import WP – Export and Import CSV and XML files to WordPress <= 2.14.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Wysoka
CVE-2025-24733
Post Grid Master <= 3.4.12 - Authenticated (Contributor+) Local File Inclusion
Średnia
CVE-2025-24604
VForm <= 3.0.5 - Missing Authorization
Wysoka
CVE-2025-24570
Atarim <= 4.0.8 - Unauthenticated Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.