Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions.
CVE-2026-42658
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions.
2026-06-16 归档
今日共收录 1237 条安全情报，包含 420 个 CVE，450 篇安全通告，以及 98 篇研究论文。
← 返回归档列表Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions.
CVE-2026-42657
Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions.
Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions.
CVE-2026-42656
Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions.
Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP <= 4.6.19 versions.
CVE-2026-42655
Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP <= 4.6.19 versions.
Subscriber Broken Access Control in Classified Listing <= 5.3.9 versions.
CVE-2026-42651
Subscriber Broken Access Control in Classified Listing <= 5.3.9 versions.
Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions.
CVE-2026-42650
Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions.
Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator <= 1.2.11 versions.
CVE-2026-42649
Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator <= 1.2.11 versions.
Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions.
CVE-2026-42640
Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions.
Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions.
CVE-2026-42411
Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions.
Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions.
CVE-2026-42384
Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions.
Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions.
CVE-2026-42378
Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions.
Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions.
CVE-2026-41556
Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions.
Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions.
CVE-2026-40799
Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions.
Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions.
CVE-2026-40796
Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions.
Subscriber Broken Access Control in Amelia <= 2.2 versions.
CVE-2026-40795
Subscriber Broken Access Control in Amelia <= 2.2 versions.
Subscriber Broken Access Control in myCred <= 3.0.3 versions.
CVE-2026-40794
Subscriber Broken Access Control in myCred <= 3.0.3 versions.
Subscriber Broken Access Control in Groundhogg < 4.4.1 versions.
CVE-2026-40793
Subscriber Broken Access Control in Groundhogg < 4.4.1 versions.
Subscriber Insecure Direct Object References (IDOR) in KiviCare <= 4.2.1 versions.
CVE-2026-40792
Subscriber Insecure Direct Object References (IDOR) in KiviCare <= 4.2.1 versions.
Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions.
CVE-2026-40791
Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions.
Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions.
CVE-2026-40790
Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions.