Wysoka
CVE-2026-15406
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 504
Wysoka
CVE-2026-13359
Contact Form to DB by BestWebSoft <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter
Krytyczna
CVE-2026-76969
@sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)
Średnia
CVE-2026-81786
Thanko Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.2.2 - Missing Authorization
Średnia
CVE-2026-13709
Graphina <= 3.1.11 - Authenticated (Author+) Stored Cross-Site Scripting via 'iq_tree_tree_chart_template' Widget Setting
Średnia
CVE-2026-77771
miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) 6.2.8 - 6.3.0 - Unauthenticated Second Factor Authentication Bypass
Wysoka
CVE-2026-77770
miniOrange 2FA – Two Factor Authentication for WordPress 5.3.24 - 6.3.0 - Missing Authorization to Unauthenticated Arbitrary Option Deletion
Wysoka
CVE-2026-84819
WPAdverts – Classifieds Plugin <= 2.3.3 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-81788
IMPress for IDX Broker <= 3.3.0 - Missing Authorization
Średnia
CVE-2026-83546
CoolClock <= 4.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Średnia
CVE-2026-81799
Return Refund and Exchange For WooCommerce <= 4.6.4 - Missing Authorization
Średnia
CVE-2026-81783
MailMunch – Grow your Email List <= 3.2.5 - Missing Authorization
Średnia
CVE-2026-81787
IMPress for IDX Broker <= 3.3.0 - Unauthenticated Unauthorized Lead and Search Manipulation
Średnia
CVE-2026-81801
WP-Stateless – Google Cloud Storage <= 4.4.1 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Średnia
CVE-2026-19436
Ultimate Gift Cards for WooCommerce < 3.2.10 - Unauthenticated Inflated Gift Card Credit Acquisition
Średnia
CVE-2026-12956
Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter
Średnia
CVE-2026-75793
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.7.0 - Unauthorized WordPress Account Creation
Średnia
CVE-2026-81791
EventON – Events Calendar <= 2.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Wysoka
CVE-2026-84293
Repeater Fields for Gravity Forms <= 3.0.4 - Unauthenticated Stored Cross-Site Scripting via Repeated Multi-Input Sub-Field Values
Średnia
CVE-2026-81275
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.7 - Authenticated (Subscriber+) Arbitrary File Read
Wysoka
CVE-2026-84219
Kirki – Freeform Page Builder, Website Builder & Customizer 6.2.1 - 6.2.5 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-66674
Simple CAPTCHA with Cloudflare Turnstile <= 1.42.1 - Captcha Bypass
Wysoka
2ae1c18c-5be3-48db-af31-4c88daa549fc
Jetpack – WP Security, Backup, Speed, & Growth 16.1 - 16.1.2 - Unauthenticated Stored Cross-Site Scripting
Wysoka
CVE-2026-81784
Wise Chat <= 3.4 - Unauthenticated PHP Object Injection
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.