Średnia
CVE-2026-81783
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 445
Średnia
CVE-2026-81787
IMPress for IDX Broker <= 3.3.0 - Unauthenticated Unauthorized Lead and Search Manipulation
Średnia
CVE-2026-81801
WP-Stateless – Google Cloud Storage <= 4.4.1 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Średnia
CVE-2026-19436
Ultimate Gift Cards for WooCommerce < 3.2.10 - Unauthenticated Inflated Gift Card Credit Acquisition
Średnia
CVE-2026-12956
Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter
Średnia
CVE-2026-75793
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.7.0 - Unauthorized WordPress Account Creation
Średnia
CVE-2026-81791
EventON – Events Calendar <= 2.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Wysoka
CVE-2026-84293
Repeater Fields for Gravity Forms <= 3.0.4 - Unauthenticated Stored Cross-Site Scripting via Repeated Multi-Input Sub-Field Values
Średnia
CVE-2026-81275
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.7 - Authenticated (Subscriber+) Arbitrary File Read
Wysoka
CVE-2026-84219
Kirki – Freeform Page Builder, Website Builder & Customizer 6.2.1 - 6.2.5 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-66674
Simple CAPTCHA with Cloudflare Turnstile <= 1.42.1 - Captcha Bypass
Wysoka
2ae1c18c-5be3-48db-af31-4c88daa549fc
Jetpack – WP Security, Backup, Speed, & Growth 16.1 - 16.1.2 - Unauthenticated Stored Cross-Site Scripting
Wysoka
CVE-2026-81784
Wise Chat <= 3.4 - Unauthenticated PHP Object Injection
Średnia
CVE-2026-66632
Simple CAPTCHA with Cloudflare Turnstile <= 1.42.1 - Unauthenticated Arbitrary Shortcode Execution
Średnia
CVE-2026-81793
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.5 - Missing Authorization
Wysoka
CVE-2026-81795
Page Visits Counter – Lite <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-81796
WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 12.0.3 - Missing Authorization
Wysoka
CVE-2026-81792
CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce <= 6.1.4 - Unauthenticated Privilege Escalation
Średnia
CVE-2026-81802
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.6.0 - Unauthenticated Insecure Direct Object Reference
Średnia
CVE-2026-81790
Csomagpontok és Címkék WooCommerce-hez < 4.2.8 - Missing Authorization
Wysoka
CVE-2026-84818
Open User Map – Interactive Leaflet Maps <= 1.4.50 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-81781
Unbounce Landing Pages <= 1.1.4 - Missing Authorization
Wysoka
CVE-2026-84817
JetFormBuilder — Dynamic Blocks Form Builder <= 3.6.5.1 - Unauthenticated Stored Cross-Site Scripting
Wysoka
CVE-2026-81798
Easy Appointments <= 4.0.2.1 - Unauthenticated Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.