2026-05-20 归档

今日共收录 1110 条安全情报,包含 284 个 CVE,411 篇安全通告,以及 113 篇研究论文。

← 返回归档列表
安全公告2026-05-20 发布INFO

NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an ...

CVE-2026-24160

NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a n

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The BLOGCHAT Chat System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...

CVE-2026-8420

The BLOGCHAT Chat System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Read More & Accordion plugin for WordPress is vulnerable to time-based blind SQL Injection...

CVE-2026-7472

The Read More & Accordion plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' paramet

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The TypeSquare Webfonts for ConoHa plugin for WordPress is vulnerable to authorization bypass in...

CVE-2026-8610

The TypeSquare Webfonts for ConoHa plugin for WordPress is vulnerable to authorization bypass in all versions up to, and

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF...

CVE-2026-8626

The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all version

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The LJ comments import: reloaded plugin for WordPress is vulnerable to Reflected Cross-Site...

CVE-2026-8624

The LJ comments import: reloaded plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Param

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Read More & Accordion plugin for WordPress is vulnerable to Privilege Escalation in all...

CVE-2026-7467

The Read More & Accordion plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and includin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ...

CVE-2026-8627

The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] var

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The VatanSMS WP SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ...

CVE-2026-7462

The VatanSMS WP SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `page` parameter in all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...

CVE-2026-8424

The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Infility Global plugin for WordPress is vulnerable to SQL Injection via the 'orderby' and ...

CVE-2026-8685

The Infility Global plugin for WordPress is vulnerable to SQL Injection via the 'orderby' and 'order' parameters in all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Faces of Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...

CVE-2026-8038

The Faces of Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'default' shortcode attribu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Amazon Scraper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...

CVE-2026-8419

The Amazon Scraper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery...

CVE-2026-8423

The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Account Switcher plugin for WordPress is vulnerable to Privilege Escalation in all versions...

CVE-2026-6456

The Account Switcher plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Word 2 Cash plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to...

CVE-2026-6395

The Word 2 Cash plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to...

CVE-2026-6072

The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Authorization Bypass Through Us

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Cross...

CVE-2026-6391

The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Cross-Site Request Forgery in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Logo Manager For Enamad plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...

CVE-2026-6549

The Logo Manager For Enamad plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' attribute

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

The Sticky plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `cvmh-sticky...

CVE-2026-6397

The Sticky plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `cvmh-sticky` shortcode `readmorete

历史摘要 · 未重新核验 · GitHub Advisory