Wysoka
CVE-2026-65549
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 534
Wysoka
CVE-2026-65517
Easy PayPal & Stripe Buy Now Button <= 2.0.4 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-15230
YayPricing <= 3.5.6 - Missing Authorization to Authenticated (Subscriber+) Pricing Configuration Modification and Coupon Code Disclosure
Wysoka
CVE-2026-65508
Simply Schedule Appointments <= 1.6.12.10 - Unauthenticated SQL Injection
Średnia
CVE-2026-25403
Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor <= 3.0.5 - Missing Authorization
Średnia
CVE-2026-65542
Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.14.5 - Missing Authorization
Wysoka
CVE-2026-65548
Betheme <= 28.5.7 - Authenticated (Contributor+) Remote Code Execution
Średnia
CVE-2026-61959
Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.24 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Wysoka
CVE-2026-65544
Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.14.5 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-15016
Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions <= 3.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Średnia
CVE-2026-16773
WPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action
Średnia
CVE-2026-16774
WPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Action
Wysoka
CVE-2026-13440
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting via 'message_popup' Parameter
Średnia
CVE-2026-13110
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via bogo_category_msg_create AJAX Action
Wysoka
CVE-2026-15025
Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints
Średnia
CVE-2026-15444
Tutor LMS <= 4.0.1 - Authenticated (Administrator+) SQL Injection via 'coupon_code' Parameter
Średnia
CVE-2026-15411
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Missing Authorization to Unauthenticated Options Update via create_popup AJAX Action
Średnia
CVE-2026-11598
Shortcodify <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'name' Shortcode Attribute
Wysoka
CVE-2026-10207
PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter
Wysoka
CVE-2026-14785
Web Directory Free <= 1.7.13 - Unauthenticated SQL Injection
Wysoka
CVE-2026-14328
Eazy Plugin Manager <= 4.4.1 - Authenticated (Subscriber+) Privilege Escalation via pos_get_option AJAX Action and admin/login REST Endpoint
Średnia
CVE-2026-5114
SpeedyCache <= 1.3.8 - Authenticated (Administrator+) Arbitrary File Read
Średnia
CVE-2026-4912
Media Cleaner: Clean your WordPress! <= 7.0.3 - Authenticated (Administrator+) Server-Side Request Forgery
Średnia
CVE-2026-15304
Plugin Organizer <= 10.2.4 - Authenticated (Subscriber+) SQL Injection
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.