p.podatnosc.pl
ZakresWszystkie technologie
WszystkieObserwowaneUstaw technologie

KATALOG PODATNOŚCI

Baza CVE

Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.

Więcej filtrów · producent, sygnały, CVSS

Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.

Wyświetlono 7751–7775 z 102 432 dopasowań.

CVE-2026-112241

Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authentication Abuse.This issue affects SureCart: from n/a through 4.9.5.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,46 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112242

Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege Escalation.This issue affects Profile Builder: from n/a through 4.0.4.

MonitorujOpis źródłowy · EN
CVSS
8,8
EPSS
0,33 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112311

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ACF Extended ACF Extended acf-extended allows Path Traversal.This issue affects ACF Extended: from n/a through 0.9.2.7.

PozostałeOpis źródłowy · EN
CVSS
6,5
EPSS
0,35 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112312

Missing Authorization vulnerability in ACF Extended ACF Extended acf-extended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ACF Extended: from n/a through 0.9.2.7.

MonitorujOpis źródłowy · EN
CVSS
7,5
EPSS
0,34 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112327

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.11.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,3
EPSS
0,33 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112379

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codepeople Contact Form Email contact-form-to-email allows Stored XSS.This issue affects Contact Form Email: from n/a through 1.3.68.

MonitorujOpis źródłowy · EN
CVSS
7,1
EPSS
0,19 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112845

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus (Slidebars) off-canvas-sidebars allows Stored XSS.This issue affects Off-Canvas Sidebars & Menus (Slidebars): from…

PozostałeOpis źródłowy · EN
CVSS
6,5
EPSS
0,17 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110893

Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2.

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,28 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110894

Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2.

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,26 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110974

The org.json parser in com.vaadin.external.google:android-json recurses once per nesting level with no depth limit: JSONTokener.nextValue() calls readArray() and readObject(), which call nextValue() again. A deeply nested JSON document, around 20 KB of…

PozostałeOpis źródłowy · EN
CVSS
6,3
EPSS
0,33 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-111830

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Mailster WP Mailster wp-mailster allows Stored XSS.This issue affects WP Mailster: from n/a through 1.9.1.0.

MonitorujOpis źródłowy · EN
CVSS
7,1
EPSS
0,2 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-111842

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.5.

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,24 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-111851

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Code Injection.This issue affects Royal Elementor Addons: from n/a through 1.7.1068.

MonitorujOpis źródłowy · EN
CVSS
7,6
EPSS
0,27 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-114180

Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform: from n/a through 4.3.2.

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,25 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-114182

Missing Authorization vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPack Addons for Elementor: from n/a through…

PozostałeOpis źródłowy · EN
CVSS
4,3
EPSS
0,22 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-114184

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Stored XSS.This issue affects Elementor Addon Elements: from n/a through…

PozostałeOpis źródłowy · EN
CVSS
6,5
EPSS
0,18 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-114457

A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS) by sending a specially crafted JSON request when JSON body filtering is enabled. Due to improper string termination during the processing of percent-encoded…

PozostałeOpis źródłowy · EN
CVSS
3,7
EPSS
0,37 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-114458

A flaw was found in mod_qos. An unauthenticated remote attacker can cause a Denial of Service (DoS) by maintaining numerous concurrent low-rate connections to a target server. When connection rate monitoring is active, the module fails to verify array…

PozostałeOpis źródłowy · EN
CVSS
5,9
EPSS
0,31 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-114459

A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering…

PozostałeOpis źródłowy · EN
CVSS
3,7
EPSS
0,37 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-114460

A flaw was found in mod_qos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during security evaluation while leaving the actual request unchanged. An…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,27 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-111847

Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MarketKing: from n/a through 2.1.72.

PozostałeOpis źródłowy · EN
CVSS
5,4
EPSS
0,19 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112826

Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.12.0.

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,28 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112843

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.14.

PozostałeOpis źródłowy · EN
CVSS
4,3
EPSS
0,2 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112867

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in H5P H5P h5p allows Stored XSS.This issue affects H5P: from n/a through 1.17.9.

PozostałeOpis źródłowy · EN
CVSS
6,5
EPSS
0,17 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-114175

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1.

PozostałeOpis źródłowy · EN
CVSS
5,4
EPSS
0,26 %
Publikacja
Poprawka
Status poprawki nieustalony
Podatności: CVE, produkt, opis, sygnały zagrożenia, CVSS, EPSS i data publikacji.
CVE / produktSygnałyOcenyPublikacjaZapisz
CVE-2026-112241

Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authentication Abuse.This issue affects SureCart: from n/a through 4.9.5.
Wysoki priorytet
 CVSS 9,8EPSS 0,46 %
CVE-2026-112242

Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege Escalation.This issue affects Profile Builder: from n/a through 4.0.4.
Monitoruj
 CVSS 8,8EPSS 0,33 %
CVE-2026-112311

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ACF Extended ACF Extended acf-extended allows Path Traversal.This issue affects ACF…
Pozostałe
 CVSS 6,5EPSS 0,35 %
CVE-2026-112312

Missing Authorization vulnerability in ACF Extended ACF Extended acf-extended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ACF Extended: from…
Monitoruj
 CVSS 7,5EPSS 0,34 %
CVE-2026-112327

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a…
Wysoki priorytet
 CVSS 9,3EPSS 0,33 %
CVE-2026-112379

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codepeople Contact Form Email contact-form-to-email allows Stored XSS.This issue…
Monitoruj
 CVSS 7,1EPSS 0,19 %
CVE-2026-112845

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus (Slidebars) off-canvas-sidebars allows…
Pozostałe
 CVSS 6,5EPSS 0,17 %
CVE-2026-110893

Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a…
Pozostałe
 CVSS 5,3EPSS 0,28 %
CVE-2026-110894

Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a…
Pozostałe
 CVSS 5,3EPSS 0,26 %
CVE-2026-110974

The org.json parser in com.vaadin.external.google:android-json recurses once per nesting level with no depth limit: JSONTokener.nextValue() calls readArray() and readObject(), which call…
Pozostałe
 CVSS 6,3EPSS 0,33 %
CVE-2026-111830

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Mailster WP Mailster wp-mailster allows Stored XSS.This issue affects WP Mailster:…
Monitoruj
 CVSS 7,1EPSS 0,2 %
CVE-2026-111842

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
Pozostałe
 CVSS 5,3EPSS 0,24 %
CVE-2026-111851

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Code Injection.This issue…
Monitoruj
 CVSS 7,6EPSS 0,27 %
CVE-2026-114180

Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform: from n/a through 4.3.2.
Pozostałe
 CVSS 5,3EPSS 0,25 %
CVE-2026-114182

Missing Authorization vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Exploiting Incorrectly Configured Access Control Security…
Pozostałe
 CVSS 4,3EPSS 0,22 %
CVE-2026-114184

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows…
Pozostałe
 CVSS 6,5EPSS 0,18 %
CVE-2026-114457

A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS) by sending a specially crafted JSON request when JSON body filtering is enabled. Due…
Pozostałe
 CVSS 3,7EPSS 0,37 %
CVE-2026-114458

A flaw was found in mod_qos. An unauthenticated remote attacker can cause a Denial of Service (DoS) by maintaining numerous concurrent low-rate connections to a target server. When…
Pozostałe
 CVSS 5,9EPSS 0,31 %
CVE-2026-114459

A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated…
Pozostałe
 CVSS 3,7EPSS 0,37 %
CVE-2026-114460

A flaw was found in mod_qos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during…
Pozostałe
 CVSS 5,3EPSS 0,27 %
CVE-2026-111847

Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security…
Pozostałe
 CVSS 5,4EPSS 0,19 %
CVE-2026-112826

Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
Pozostałe
 CVSS 5,3EPSS 0,28 %
CVE-2026-112843

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong…
Pozostałe
 CVSS 4,3EPSS 0,2 %
CVE-2026-112867

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in H5P H5P h5p allows Stored XSS.This issue affects H5P: from n/a through 1.17.9.
Pozostałe
 CVSS 6,5EPSS 0,17 %
CVE-2026-114175

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from…
Pozostałe
 CVSS 5,4EPSS 0,26 %
Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 8.11.2026, 23:32 UTC – 9.11.2026, 01:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.

Więcej możliwości