Wysoka
CVE-2025-11967
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 4 498
Wyczyść filtry
Średnia
CVE-2025-12092
CYAN Backup <= 2.5.4 - Authenticated (Admin+) Arbitrary File Deletion
Średnia
CVE-2025-12000
WPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal
Wysoka
CVE-2025-12161
Smart Auto Upload Images <= 1.2.0 - Authenticated (Contributor+) Arbitrary File Upload
Krytyczna
CVE-2025-12352
Gravity Forms <= 2.9.20 - Unauthenticated Arbitrary File Upload via 'copy_post_image'
Wysoka
CVE-2025-64373
Traveler < 3.2.6 - Unauthenticated Local File Inclusion
Średnia
CVE-2025-12560
Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url
Wysoka
CVE-2025-12497
Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]
Średnia
CVE-2025-11373
Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type Upload
Średnia
CVE-2025-12388
B Carousel Block – Responsive Image and Content Carousel <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery
Średnia
CVE-2025-11917
WPeMatico RSS Feed Fetcher <= 2.8.11 - Authenticated (Subscriber+) Server-Side Request Forgery via wpematico_test_feed
Krytyczna
CVE-2025-12674
KiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File Upload
Wysoka
CVE-2025-11890
Crypto Payment Gateway with Payeer for WooCommerce <= 1.0.3 - Unauthenticated Payment Bypass
Wysoka
CVE-2025-10896
Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload
Wysoka
CVE-2025-11724
EM Beer Manager <= 3.2.3 - Authenticated (Subscriber+) Arbitrary File Upload
Wysoka
CVE-2025-11704
Elegance Menu <= 1.9 - Authenticated (Contributor+) Local File Inclusion
Wysoka
CVE-2025-63003
North <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion
Krytyczna
CVE-2025-12682
Easy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File Upload
Krytyczna
CVE-2025-12493
ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'
Wysoka
CVE-2025-64216
SmartMag <= 10.3.0 - Authenticated (Contributor+) Local File Inclusion
Średnia
CVE-2025-12137
Import WP – Export and Import CSV and XML files to WordPress <= 2.14.16 - Authenticated (Admin+) Arbitrary File Read
Średnia
CVE-2025-11983
WP Discourse <= 2.5.9 - Authenticated (Author+) Information Exposure
Wysoka
CVE-2025-11920
WPCOM Member <= 1.7.14 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Wysoka
CVE-2025-12171
RESTful Content Syndication 1.1.0 - 1.5.0 - Authenticated (Contributor+) Arbitrary File Upload
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.