2026-05-11 归档

今日共收录 747 条安全情报,包含 109 个 CVE,376 篇安全通告,以及 5 篇研究论文。

← 返回归档列表
安全公告2026-05-10 发布INFO

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend...

CVE-2022-50969

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module. The d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage...

CVE-2022-50966

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module. The date_created, d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Projectsend r1295 contains a stored cross-site scripting vulnerability that allows authenticated...

CVE-2021-47947

Projectsend r1295 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject mal

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

WordPress Plugin Testimonial Slider and Showcase 2.2.6 contains a stored cross-site scripting...

CVE-2022-50947

WordPress Plugin Testimonial Slider and Showcase 2.2.6 contains a stored cross-site scripting vulnerability that allows

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders...

CVE-2022-50962

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders module. The date_create

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

WordPress Plugin Netroics Blog Posts Grid 1.0 contains a stored cross-site scripting...

CVE-2022-50946

WordPress Plugin Netroics Blog Posts Grid 1.0 contains a stored cross-site scripting vulnerability that allows authentic

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

WordPress GetPaid Plugin 2.4.6 contains an HTML injection vulnerability that allows authenticated...

CVE-2021-47948

WordPress GetPaid Plugin 2.4.6 contains an HTML injection vulnerability that allows authenticated attackers to inject ar

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions...

CVE-2022-50963

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active modul

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated...

CVE-2022-50943

Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious s

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows...

CVE-2022-50958

WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attacke

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the tickets/manage...

CVE-2022-50967

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the tickets/manage module. The date_created

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the posts/manage...

CVE-2022-50965

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the posts/manage module. The date_created,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

memono Notepad 4.2 contains a denial of service vulnerability that allows attackers to crash the...

CVE-2021-47944

memono Notepad 4.2 contains a denial of service vulnerability that allows attackers to crash the application by pasting

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

WordPress International Sms For Contact Form 7 Integration version 1.2 contains a reflected cross...

CVE-2022-50960

WordPress International Sms For Contact Form 7 Integration version 1.2 contains a reflected cross-site scripting vulnera

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that...

CVE-2022-50948

Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attack

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions...

CVE-2022-50964

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Drupal avatar_uploader 7.x-1.0-beta8 contains a reflected cross-site scripting vulnerability that...

CVE-2022-50957

Drupal avatar_uploader 7.x-1.0-beta8 contains a reflected cross-site scripting vulnerability that allows unauthenticated

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

WordPress Contact Form Builder 1.6.1 contains a reflected cross-site scripting vulnerability that...

CVE-2022-50959

WordPress Contact Form Builder 1.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

WordPress TheCartPress 1.5.3.6 contains an unauthenticated privilege escalation vulnerability...

CVE-2021-47932

WordPress TheCartPress 1.5.3.6 contains an unauthenticated privilege escalation vulnerability that allows attackers to c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

WordPress Plugin Download From Files version 1.48 and earlier contains an arbitrary file upload...

CVE-2021-47940

WordPress Plugin Download From Files version 1.48 and earlier contains an arbitrary file upload vulnerability that allow

历史摘要 · 未重新核验 · GitHub Advisory