Wysoka
CVE-2026-83593
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 8 950
Wyczyść filtry
Średnia
CVE-2026-75905
WP Recipe Maker <= 10.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Shortcode
Średnia
CVE-2026-11821
Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint
Średnia
CVE-2026-19944
WP Crowdfunding <= 2.2.1 - Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post Meta
Średnia
CVE-2026-19800
Mail Mint <= 1.31.0 - Authenticated (Custom+) SQL Injection via 'status' Parameter
Średnia
CVE-2026-11363
Ninja Forms <= 3.14.6 - Authenticated (Administrator+) PHP Object Injection via Form Import
Wysoka
CVE-2026-76801
FireBox <= 3.1.10 - Authenticated (Author+) Remote Code Execution to Privilege Escalation
Wysoka
CVE-2026-15667
Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter
Wysoka
CVE-2026-15406
Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter
Średnia
CVE-2026-77771
miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) 6.2.8 - 6.3.0 - Unauthenticated Second Factor Authentication Bypass
Wysoka
CVE-2026-77770
miniOrange 2FA – Two Factor Authentication for WordPress 5.3.24 - 6.3.0 - Missing Authorization to Unauthenticated Arbitrary Option Deletion
Średnia
CVE-2026-81783
MailMunch – Grow your Email List <= 3.2.5 - Missing Authorization
Średnia
CVE-2026-19436
Ultimate Gift Cards for WooCommerce < 3.2.10 - Unauthenticated Inflated Gift Card Credit Acquisition
Wysoka
CVE-2026-81784
Wise Chat <= 3.4 - Unauthenticated PHP Object Injection
Średnia
CVE-2026-66632
Simple CAPTCHA with Cloudflare Turnstile <= 1.42.1 - Unauthenticated Arbitrary Shortcode Execution
Wysoka
CVE-2026-48888
WooCommerce < 11.1.0 - Unauthenticated Denial of Service
Wysoka
CVE-2026-14444
WP Fusion (Pro) <= 3.47.13 - Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parameter
Średnia
CVE-2026-12757
Email Subscribers & Newsletters <= 5.9.27 - Unauthenticated Arbitrary Shortcode Execution via Subscriber Name Field
Średnia
CVE-2026-80440
Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.14.2 - Unauthenticated Arbitrary Shortcode Execution
Średnia
CVE-2026-81021
SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent 3.2.9 - 3.5.2 - Unauthenticated Ticket Attachment Read
Średnia
CVE-2026-2520
Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Plugin Update
Średnia
CVE-2026-17509
WPML Multilingual CMS <= 4.9.5 - Incorrect Authorization to Authenticated (Subscriber+) SQL Injection via ‘elementIds’
Wysoka
CVE-2026-18480
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.6.3 - Authenticated (Subscriber+) Arbitrary Account Email Takeover
Wysoka
CVE-2026-16502
Live Composer <= 2.1.18 - Authenticated (Contributor+) PHP Object Injection via Shortcode
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.