2026-05-28 归档

今日共收录 1581 条安全情报，包含 810 个 CVE，383 篇安全通告，以及 109 篇研究论文。

漏洞预警2026-05-27 发布INFO

The Livemesh Addons for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `labb_admin_ajax` AJAX action in all versions up to, and includi...

CVE-2026-3897

The Livemesh Addons for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `labb_a

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-27 发布INFO

The Livemesh SiteOrigin Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `lsow_admin_ajax` AJAX action in all versions up to, and including, 3.9...

CVE-2026-3896

The Livemesh SiteOrigin Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `lsow_admin_aj

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-27 发布INFO

The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `lvca_admin_ajax` AJAX action in all versions up to, and i...

CVE-2026-3895

The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-27 发布INFO

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/notify_ccss and /wp-json/litespeed/v1/notify_ucss REST API en...

CVE-2026-3375

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/noti

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-27 发布INFO

The Enable jQuery Migrate Helper plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `downgrade_jquery_version()` fu...

CVE-2026-3279

The Enable jQuery Migrate Helper plugin for WordPress is vulnerable to unauthorized modification of data due to a missin

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-27 发布INFO

The Gutenverse plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.4.6 due to insufficient input s...

CVE-2026-3001

The Gutenverse plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all version

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-27 发布INFO

The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `[lvca_carousel]` and `[lvca_posts_carousel]` shortcode at...

CVE-2026-2030

The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-27 发布INFO

A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-...

CVE-2025-41670

A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating co

历史摘要 · 未重新核验 · NVD

#cve #cwe-427

漏洞预警2026-05-27 发布INFO

The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device downloaded from the PLCnext Store without implementing any data ve...

CVE-2025-41669

The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device downloade

历史摘要 · 未重新核验 · NVD

#cve #cwe-347

漏洞预警2026-05-27 发布INFO

The Query Shortcode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.2.1 via the shortcode function. This makes it possible for...

CVE-2026-9200

The Query Shortcode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.2

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-05-27 发布INFO

The WP Promoter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reset_stats() function in versions up to, and in...

CVE-2026-9014

The WP Promoter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability chec

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-05-27 发布INFO

The GoStats for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce v...

CVE-2026-8943

The GoStats for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and in

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-05-27 发布INFO

The CDN Linker lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.1. This is due to missing or incorrect nonce validatio...

CVE-2026-8941

The CDN Linker lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-05-27 发布INFO

The Search Simple Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2. This is due to missing or incorrect nonce valida...

CVE-2026-8939

The Search Simple Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includi

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-05-27 发布INFO

The auto making JSON-LD plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.3. This is due to missing or incorrect nonce v...

CVE-2026-8938

The auto making JSON-LD plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-05-27 发布INFO

The WP AutoBuzz plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validatio...

CVE-2026-8911

The WP AutoBuzz plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-05-27 发布INFO

The Auto Thumbnail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'thumbnails' shortcode in all versions up to, and including, 1.0. This is due to ins...

CVE-2026-8899

The Auto Thumbnail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'thumbnails' shortcode in a

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-27 发布INFO

The Events In City plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'org-events' shortcode in versions up to, and including, 3.0. This is due to insuffi...

CVE-2026-8898

The Events In City plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'org-events' shortcode in v

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-27 发布INFO

The Shortcode Buddy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 0.1.9.5 due to insufficient ...

CVE-2026-8897

The Shortcode Buddy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all ve

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-05-27 发布INFO

The iWR Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `iwrtooltip` shortcode in versions up to, and including, 1.0. This is due to i...

CVE-2026-8894

The iWR Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `iwrtooltip` shortcod

历史摘要 · 未重新核验 · NVD

#cve #cwe-79