The Quick Playground plugin for WordPress is vulnerable to Path Traversal in all versions up to,...
CVE-2026-2500
The Quick Playground plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.4. T
2026-06-07 归档
今日共收录 735 条安全情报，包含 30 个 CVE，368 篇安全通告，以及 77 篇研究论文。
← 返回归档列表The MapPress Maps for WordPress plugin for WordPress is vulnerable to Authorization Bypass...
CVE-2026-8839
The MapPress Maps for WordPress plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key i
The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to PHP Object...
CVE-2026-7566
The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to PHP Object Injection in all versions up t
The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More...
CVE-2026-7792
The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vu
The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to Arbitrary File...
CVE-2026-7565
The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to Arbitrary File Read via Directory Travers
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta...
CVE-2025-2415
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypas
The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More...
CVE-2026-8901
The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More plugin for WordPress is vuln
The Page-list plugin for WordPress is vulnerable to Missing Authorization in all versions up to,...
CVE-2026-9008
The Page-list plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.2. Thi
The Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template...
CVE-2026-9281
The Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits plugin for WordPress
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable...
CVE-2026-6448
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL
The Simple SEO Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-8900
The Simple SEO Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in a
The Frontend User Notes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...
CVE-2026-7047
The Frontend User Notes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is...
CVE-2026-9719
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Req
The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to...
CVE-2026-9290
The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in al
The Express Payment For Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting...
CVE-2026-8893
The Express Payment For Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribut
On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a...
CVE-2026-34123
On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a limited set of low‑sensit
The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to...
CVE-2025-12656
The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary directory de
A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared...
CVE-2026-11424
A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared by Altium Enterprise Ser
The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to,...
CVE-2026-7523
The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. T
A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers...
CVE-2026-6240
A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers service, due to insufficie