2026-05-03 归档

今日共收录 715 条安全情报,包含 73 个 CVE,373 篇安全通告,以及 10 篇研究论文。

← 返回归档列表
安全公告2026-05-02 发布INFO

A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the...

CVE-2026-7608

A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the function tools_diagnostic

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in...

CVE-2026-6229

The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and incl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to...

CVE-2026-6449

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Improper Authorization i

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Geo Mashup plugin for WordPress is vulnerable to time-based blind SQL Injection via the ...

CVE-2026-6457

The Geo Mashup plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'geo_mashup_null_fields' par

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A weakness has been identified in TRENDnet TEW-821DAP 1.12B01. This issue affects the function...

CVE-2026-7606

A weakness has been identified in TRENDnet TEW-821DAP 1.12B01. This issue affects the function find_hwid/new_gui_update_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets...

CVE-2026-2052

The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vuln

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A security flaw has been discovered in JeecgBoot up to 3.9.1. This vulnerability affects the...

CVE-2026-7605

A security flaw has been discovered in JeecgBoot up to 3.9.1. This vulnerability affects the function CommonController.u

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The FundPress – WordPress Donation Plugin for WordPress is vulnerable to authorization bypass in...

CVE-2026-4650

The FundPress – WordPress Donation Plugin for WordPress is vulnerable to authorization bypass in versions up to and incl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix pass-by...

CVE-2026-43058

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix pass-by-value structs causing MSA

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A vulnerability was determined in JeecgBoot up to 3.9.1. Affected by this issue is the function...

CVE-2026-7603

A vulnerability was determined in JeecgBoot up to 3.9.1. Affected by this issue is the function checkPathTraversalBatch

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions...

CVE-2026-5111

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions...

CVE-2026-5109

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

A vulnerability was identified in JeecgBoot up to 3.9.1. This affects the function...

CVE-2026-7604

A vulnerability was identified in JeecgBoot up to 3.9.1. This affects the function OpenApiController.add/OpenApiControll

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The PixelYourSite Pro – Your smart PIXEL (TAG) Manager plugin for WordPress is vulnerable to...

CVE-2026-7049

The PixelYourSite Pro – Your smart PIXEL (TAG) Manager plugin for WordPress is vulnerable to Server-Side Request Forgery

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all...

CVE-2026-7647

The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 3

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Call for Price for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site...

CVE-2026-6447

The Call for Price for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The My Social Feeds – Social Feeds Embedder plugin for WordPress is vulnerable to Sensitive...

CVE-2026-6446

The My Social Feeds – Social Feeds Embedder plugin for WordPress is vulnerable to Sensitive Information Exposure in all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Ona theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to,...

CVE-2026-6812

The Ona theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.26 via

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress...

CVE-2026-6916

The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vul

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-02 发布INFO

The Import and export users and customers plugin for WordPress is vulnerable to Privilege...

CVE-2026-7641

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up

历史摘要 · 未重新核验 · GitHub Advisory