Wysoka
CVE-2025-6585
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 757
Wysoka
ghsa-56r6-ccm5-8hg3
Alchemy Non-SMA and Webauthn Account Security Advisory
Wysoka
CVE-2025-53832
@translated/lara-mcp vulnerable to command injection in import_tmx tool
Średnia
CVE-2025-6831
User Registration <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via urcr_restrict Shortcode
Średnia
CVE-2025-49656
Apache Jena allows users with administrator access to create databases files outside the files area of the Fuseki server
Wysoka
CVE-2025-50151
Apache Jena doesn't validate file access paths in configuration files uploaded by users with administrator access
Średnia
CVE-2025-5240
CRM and Lead Management by vcita <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter
Średnia
CVE-2025-7486
Ebook Store <= 5.8012 - Authenticated (Administrator+) Stored Cross-Site Scripting via Order Details
Wysoka
CVE-2025-24000
Post SMTP <= 3.2.0 - Missing Authorization to Authenticated (Subscriber+) Account Takeover via Email Log Exposure
Wysoka
CVE-2025-60202
Favorites <= 2.3.6 - Unauthenticated Local File Inclusion
Średnia
CVE-2025-8015
Shortcodes Ultimate <= 7.4.2 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title and Slide Link
Średnia
CVE-2025-7644
Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Średnia
CVE-2025-7495
WP-Members <= 3.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Wysoka
CVE-2025-7645
Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.2.8 - Unauthenticated Arbitrary File Deletion Triggered via Admin Form Submission Deletion
Średnia
CVE-2025-48151
CM Map Locations <= 2.1.6 - Reflected Cross-Site Scripting
Wysoka
CVE-2025-60200
LearnPress Export Import <= 4.1.2 - Unauthenticated Local File Inclusion
Średnia
CVE-2025-52800
The E-Commerce ERP <= 2.1.1.3 - Missing Authorization
Średnia
CVE-2025-7965
CBX Restaurant Booking <= 1.2.1 - Cross-Site Request Forgery to Plugin Reset
Wysoka
CVE-2025-60201
Customer Area < 8.3.4 - Unauthenticated Local File Inclusion
Średnia
CVE-2025-7354
WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes
Średnia
CVE-2025-7369
Shortcodes Ultimate <= 7.4.2 - Cross-Site Request Forgery to Arbitrary Shortcode Execution
Średnia
CVE-2025-4685
Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Wysoka
CVE-2025-54075
Nuxt MDC has an XSS vulnerability in markdown rendering that bypasses HTML filtering
Średnia
CVE-2025-7885
A vulnerability, which was classified as problematic, has been found in Huashengdun WebSSH up to 1.6.2. Affected by this issue is some unknown functionality of the component Login Page. The manipulati
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.