p.podatnosc.pl
ZakresWszystkie technologie
WszystkieObserwowaneUstaw technologie

KATALOG PODATNOŚCI

Baza CVE

Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.

Więcej filtrów · producent, sygnały, CVSS
Priorytet: Wysoki priorytet Wyczyść filtry

Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.

Wyświetlono 10051–10075 z 11 962 dopasowań.

CVE-2026-28105

Deserialization of Untrusted Data vulnerability in ThemeREX Good Energy goodenergy allows Object Injection.This issue affects Good Energy: from n/a through <= 1.7.7.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,45 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-28114

Unrestricted Upload of File with Dangerous Type vulnerability in firassaidi WooCommerce License Manager fs-license-manager allows Upload a Web Shell to a Web Server.This issue affects WooCommerce License Manager: from n/a through <= 7.0.6.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,1
EPSS
0,32 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-28074

Deserialization of Untrusted Data vulnerability in ThemeREX Pizza House pizzahouse allows Object Injection.This issue affects Pizza House: from n/a through <= 1.4.0.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,45 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-28043

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Healer - Doctor, Clinic & Medical WordPress Theme healer allows PHP Local File Inclusion.This issue affects Healer - Doctor,…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,48 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-27983

Incorrect Privilege Assignment vulnerability in designthemes LMS Elementor Pro lms-elementor-pro allows Privilege Escalation.This issue affects LMS Elementor Pro: from n/a through <= 1.0.4.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,37 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-27984

Improper Control of Generation of Code ('Code Injection') vulnerability in Marketing Fire Widget Options widget-options allows Code Injection.This issue affects Widget Options: from n/a through <= 4.1.3.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,0
EPSS
0,32 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-27417

Deserialization of Untrusted Data vulnerability in SeventhQueen Sweet Date sweetdate allows Object Injection.This issue affects Sweet Date: from n/a through < 4.0.1.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,45 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-27437

Deserialization of Untrusted Data vulnerability in ThemeREX Tennis Club tennis-sportclub allows Object Injection.This issue affects Tennis Club: from n/a through <= 1.2.3.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,45 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-27438

Deserialization of Untrusted Data vulnerability in ThemeREX Kingler kingler allows Object Injection.This issue affects Kingler: from n/a through <= 1.7.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,45 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-27439

Deserialization of Untrusted Data vulnerability in ThemeREX Dentario dentario allows Object Injection.This issue affects Dentario: from n/a through <= 1.5.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,45 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-27389

Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,48 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-27384

Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects W3 Total Cache: from n/a through <= 2.9.1.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,0
EPSS
0,36 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-24960

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Charety charety allows Using Malicious Files.This issue affects Charety: from n/a through < 2.0.2.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,9
EPSS
0,38 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-23767

ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,5 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-23802

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine ai-engine allows Using Malicious Files.This issue affects AI Engine: from n/a through <= 3.3.2.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,1
EPSS
0,54 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-22474

Deserialization of Untrusted Data vulnerability in ThemeREX Equestrian Centre equestrian-centre allows Object Injection.This issue affects Equestrian Centre: from n/a through <= 1.5.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,46 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-22475

Deserialization of Untrusted Data vulnerability in axiomthemes Estate estate allows Object Injection.This issue affects Estate: from n/a through <= 1.3.4.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,46 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-22497

Deserialization of Untrusted Data vulnerability in AncoraThemes Jardi jardi allows Object Injection.This issue affects Jardi: from n/a through <= 1.7.2.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,61 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-22501

Deserialization of Untrusted Data vulnerability in axiomthemes Mounthood mounthood allows Object Injection.This issue affects Mounthood: from n/a through <= 1.3.2.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,61 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-22451

Deserialization of Untrusted Data vulnerability in AncoraThemes Handyman handyman-services allows Object Injection.This issue affects Handyman: from n/a through <= 1.4.7.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,61 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-22453

Deserialization of Untrusted Data vulnerability in ThemeREX Pets Club petclub allows Object Injection.This issue affects Pets Club: from n/a through <= 2.3.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,61 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-22454

Deserialization of Untrusted Data vulnerability in ThemeREX Solaris solaris allows Object Injection.This issue affects Solaris: from n/a through <= 2.5.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,61 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-22417

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Wedding grandwedding allows Object Injection.This issue affects Grand Wedding: from n/a through < 3.1.11.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,61 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-22390

Improper Control of Generation of Code ('Code Injection') vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress: from n/a through <= 3.0.1.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,9
EPSS
0,55 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2025-68555

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Nutrie nutrie allows Upload a Web Shell to a Web Server.This issue affects Nutrie: from n/a through < 2.0.1.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,9
EPSS
0,5 %
Publikacja
Poprawka
Status poprawki nieustalony
Podatności: CVE, produkt, opis, sygnały zagrożenia, CVSS, EPSS i data publikacji.
CVE / produktSygnałyOcenyPublikacjaZapisz
CVE-2026-28105

Deserialization of Untrusted Data vulnerability in ThemeREX Good Energy goodenergy allows Object Injection.This issue affects Good Energy: from n/a through <= 1.7.7.
Wysoki priorytet
 CVSS 9,8EPSS 0,45 %
CVE-2026-28114

Unrestricted Upload of File with Dangerous Type vulnerability in firassaidi WooCommerce License Manager fs-license-manager allows Upload a Web Shell to a Web Server.This issue affects…
Wysoki priorytet
 CVSS 9,1EPSS 0,32 %
CVE-2026-28074

Deserialization of Untrusted Data vulnerability in ThemeREX Pizza House pizzahouse allows Object Injection.This issue affects Pizza House: from n/a through <= 1.4.0.
Wysoki priorytet
 CVSS 9,8EPSS 0,45 %
CVE-2026-28043

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Healer - Doctor, Clinic & Medical WordPress Theme healer…
Wysoki priorytet
 CVSS 9,8EPSS 0,48 %
CVE-2026-27983

Incorrect Privilege Assignment vulnerability in designthemes LMS Elementor Pro lms-elementor-pro allows Privilege Escalation.This issue affects LMS Elementor Pro: from n/a through <= 1.0.4.
Wysoki priorytet
 CVSS 9,8EPSS 0,37 %
CVE-2026-27984

Improper Control of Generation of Code ('Code Injection') vulnerability in Marketing Fire Widget Options widget-options allows Code Injection.This issue affects Widget Options: from n/a…
Wysoki priorytet
 CVSS 9,0EPSS 0,32 %
CVE-2026-27417

Deserialization of Untrusted Data vulnerability in SeventhQueen Sweet Date sweetdate allows Object Injection.This issue affects Sweet Date: from n/a through < 4.0.1.
Wysoki priorytet
 CVSS 9,8EPSS 0,45 %
CVE-2026-27437

Deserialization of Untrusted Data vulnerability in ThemeREX Tennis Club tennis-sportclub allows Object Injection.This issue affects Tennis Club: from n/a through <= 1.2.3.
Wysoki priorytet
 CVSS 9,8EPSS 0,45 %
CVE-2026-27438

Deserialization of Untrusted Data vulnerability in ThemeREX Kingler kingler allows Object Injection.This issue affects Kingler: from n/a through <= 1.7.
Wysoki priorytet
 CVSS 9,8EPSS 0,45 %
CVE-2026-27439

Deserialization of Untrusted Data vulnerability in ThemeREX Dentario dentario allows Object Injection.This issue affects Dentario: from n/a through <= 1.5.
Wysoki priorytet
 CVSS 9,8EPSS 0,45 %
CVE-2026-27389

Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication…
Wysoki priorytet
 CVSS 9,8EPSS 0,48 %
CVE-2026-27384

Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue…
Wysoki priorytet
 CVSS 9,0EPSS 0,36 %
CVE-2026-24960

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Charety charety allows Using Malicious Files.This issue affects Charety: from n/a through < 2.0.2.
Wysoki priorytet
 CVSS 9,9EPSS 0,38 %
CVE-2026-23767

ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources…
Wysoki priorytet
 CVSS 9,8EPSS 0,5 %
CVE-2026-23802

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine ai-engine allows Using Malicious Files.This issue affects AI Engine: from n/a through <= 3.3.2.
Wysoki priorytet
 CVSS 9,1EPSS 0,54 %
CVE-2026-22474

Deserialization of Untrusted Data vulnerability in ThemeREX Equestrian Centre equestrian-centre allows Object Injection.This issue affects Equestrian Centre: from n/a through <= 1.5.
Wysoki priorytet
 CVSS 9,8EPSS 0,46 %
CVE-2026-22475

Deserialization of Untrusted Data vulnerability in axiomthemes Estate estate allows Object Injection.This issue affects Estate: from n/a through <= 1.3.4.
Wysoki priorytet
 CVSS 9,8EPSS 0,46 %
CVE-2026-22497

Deserialization of Untrusted Data vulnerability in AncoraThemes Jardi jardi allows Object Injection.This issue affects Jardi: from n/a through <= 1.7.2.
Wysoki priorytet
 CVSS 9,8EPSS 0,61 %
CVE-2026-22501

Deserialization of Untrusted Data vulnerability in axiomthemes Mounthood mounthood allows Object Injection.This issue affects Mounthood: from n/a through <= 1.3.2.
Wysoki priorytet
 CVSS 9,8EPSS 0,61 %
CVE-2026-22451

Deserialization of Untrusted Data vulnerability in AncoraThemes Handyman handyman-services allows Object Injection.This issue affects Handyman: from n/a through <= 1.4.7.
Wysoki priorytet
 CVSS 9,8EPSS 0,61 %
CVE-2026-22453

Deserialization of Untrusted Data vulnerability in ThemeREX Pets Club petclub allows Object Injection.This issue affects Pets Club: from n/a through <= 2.3.
Wysoki priorytet
 CVSS 9,8EPSS 0,61 %
CVE-2026-22454

Deserialization of Untrusted Data vulnerability in ThemeREX Solaris solaris allows Object Injection.This issue affects Solaris: from n/a through <= 2.5.
Wysoki priorytet
 CVSS 9,8EPSS 0,61 %
CVE-2026-22417

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Wedding grandwedding allows Object Injection.This issue affects Grand Wedding: from n/a through < 3.1.11.
Wysoki priorytet
 CVSS 9,8EPSS 0,61 %
CVE-2026-22390

Improper Control of Generation of Code ('Code Injection') vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects…
Wysoki priorytet
 CVSS 9,9EPSS 0,55 %
CVE-2025-68555

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Nutrie nutrie allows Upload a Web Shell to a Web Server.This issue affects Nutrie: from n/a through < 2.0.1.
Wysoki priorytet
 CVSS 9,9EPSS 0,5 %
Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 13.11.2026, 03:02 UTC – 13.11.2026, 08:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.

Więcej możliwości