The Click to Chat – WA Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the [chat] shortcode 'num' parameter in all versions up to, and including, 4....

CVE-2026-7795

CVE-2026-7795 是 WordPress 插件 Click to Chat – WA Widget（版本 ≤ 4.38）中的一个存储型跨站脚本漏洞。该插件通过 [chat] 短代码提供 WhatsApp 聊天按钮功能，其 'num

历史摘要 · 未重新核验 · NVD

The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticit...

CVE-2026-7792

WordPress的WPForms插件（至1.10.0.1版本）存在数据真实性验证不足漏洞。其PayPal Commerce Webhook端点在处理JSON webhook负载时，未验证请求是否来自PayPal（缺少HMAC-SHA256

历史摘要 · 未重新核验 · NVD

The Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'jtlma_...

CVE-2026-9281

CVE-2026-9281 是一个影响 WordPress 插件 Master Addons For Elementor（版本 ≤ 3.1.0）的存储型跨站脚本（Stored XSS）漏洞。该漏洞位于插件的 'jtlma_custom_js

历史摘要 · 未重新核验 · NVD

The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.17 via the (profile ...

CVE-2026-9290

CVE-2026-9290 是 WordPress 插件 WP User Manager（用户资料构建器与会员管理）中的本地文件包含漏洞。该插件所有版本至 2.9.17 均受影响，漏洞位于 profile template scope 功能

历史摘要 · 未重新核验 · NVD

An Improved CNN-LSTM Based Intrusion Detection System for IoT Networks

随着物联网设备的快速普及，网络安全威胁日益严峻，入侵检测系统成为保护网络环境的关键。本文提出一种改进的基于CNN-LSTM的入侵检测模型，旨在提升物联网网络中的攻击检测性能。该模型融合了多分类、数据集集成和时间特征学习技术，利用卷积神经网络

历史摘要 · 未重新核验 · arXiv cs.CR

Dimensionality Reduction for Cyberattack Classification: A Comparative Evaluation of PCA and Linear Predictive Coding

本文针对网络安全攻击检测中高维特征表示导致的计算复杂度和资源消耗问题，研究了两种降维方法——主成分分析（PCA）和线性预测编码（LPC）在攻击分类中的效果。作者通过生成不同维度的压缩特征表示，并在多个分类模型（如SVM、随机森林等）上进行评

历史摘要 · 未重新核验 · arXiv cs.CR

The Simple SEO Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 1.2.8 due to insufficie...

CVE-2026-8900

The Simple SEO Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in a

历史摘要 · 未重新核验 · NVD

The Express Payment For Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute of the [stripe-express] shortcode in versions up to, an...

CVE-2026-8893

The Express Payment For Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribut

历史摘要 · 未重新核验 · NVD

The Frontend User Notes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1. This is due to missing or incorrect nonce v...

CVE-2026-7047

The Frontend User Notes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl

历史摘要 · 未重新核验 · NVD

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order' parameter in all versions up t...

CVE-2026-6448

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL

历史摘要 · 未重新核验 · NVD

An authenticated format string vulnerability exists in the ONVIF Subscribe service in Tapo C520WS v2 due to improper handling of externally supplied parameters within formatting...

CVE-2026-6242

An authenticated format string vulnerability exists in the ONVIF Subscribe service in Tapo C520WS v2 due to improper han

历史摘要 · 未重新核验 · NVD

An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo C520WS v2, where user-controlled input is improperly passed to formatting functions withou...

CVE-2026-6241

An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo C520WS v2, where user-controlled

历史摘要 · 未重新核验 · NVD

A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers service, due to insufficient boundary checks when handling multiple user deletion p...

CVE-2026-6240

A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers service, due to insufficie

历史摘要 · 未重新核验 · NVD

A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device fails to properly validate the number of XML user nodes d...

CVE-2026-6239

A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device

历史摘要 · 未重新核验 · NVD

On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a limited set of low‑sensitivity operations. Due to a logic flaw in the device’s API...

CVE-2026-34123

On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a limited set of low‑sensit

历史摘要 · 未重新核验 · NVD

The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Insecure Direct Object Reference / Authorizati...

CVE-2026-10038

The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vul

历史摘要 · 未重新核验 · NVD

The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation in the de...

CVE-2025-12656

The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary directory de

历史摘要 · 未重新核验 · NVD

The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in versions up to and including 7.0.18. This is due to the use of `...

CVE-2026-7654

The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in version

历史摘要 · 未重新核验 · NVD

The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. This is due to the plugin not properly verifying that a us...

CVE-2026-7523

The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. T

历史摘要 · 未重新核验 · NVD

Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Proces...

CVE-2026-45409

Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in

历史摘要 · 未重新核验 · NVD