Author Arbitrary File Download in Download Monitor <= 5.1.9 versions.
CVE-2026-39489
Author Arbitrary File Download in Download Monitor <= 5.1.9 versions.
2026-06-16 归档
今日共收录 1237 条安全情报，包含 420 个 CVE，450 篇安全通告，以及 98 篇研究论文。
← 返回归档列表Author PHP Object Injection in Modula Image Gallery <= 2.14.18 versions.
CVE-2026-39481
Author PHP Object Injection in Modula Image Gallery <= 2.14.18 versions.
Unauthenticated Sensitive Data Exposure in Backup Migration <= 2.1.1 versions.
CVE-2026-39480
Unauthenticated Sensitive Data Exposure in Backup Migration <= 2.1.1 versions.
Contributor PHP Object Injection in Post Duplicator <= 3.0.10 versions.
CVE-2026-39474
Contributor PHP Object Injection in Post Duplicator <= 3.0.10 versions.
Shop manager PHP Object Injection in WooCommerce PDF Invoices & Packing Slips < 5.9.0 versions.
CVE-2026-39472
Shop manager PHP Object Injection in WooCommerce PDF Invoices & Packing Slips < 5.9.0 versions.
Author PHP Object Injection in ShortPixel Image Optimizer <= 6.4.3 versions.
CVE-2026-39471
Author PHP Object Injection in ShortPixel Image Optimizer <= 6.4.3 versions.
Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 versions.
CVE-2026-39470
Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 versions.
Contributor Arbitrary File Deletion in Meta Box – WordPress Custom Fields Framework <= 5.11.1 versions.
CVE-2026-39468
Contributor Arbitrary File Deletion in Meta Box – WordPress Custom Fields Framework <= 5.11.1 versions.
Unauthenticated Cross Site Scripting (XSS) in ManageWP Worker <= 4.9.31 versions.
CVE-2026-39463
Unauthenticated Cross Site Scripting (XSS) in ManageWP Worker <= 4.9.31 versions.
Unauthenticated Cross Site Scripting (XSS) in WP Google Review Slider <= 18.0 versions.
CVE-2026-39451
Unauthenticated Cross Site Scripting (XSS) in WP Google Review Slider <= 18.0 versions.
Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions.
CVE-2026-39450
Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Contact Form to Any API <= 3.0.3 versions.
CVE-2026-39449
Unauthenticated Cross Site Scripting (XSS) in Contact Form to Any API <= 3.0.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.10.6 versions.
CVE-2026-39447
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.10.6 versions.
Unauthenticated Cross Site Scripting (XSS) in CformsII <= 15.1.3 versions.
CVE-2026-39435
Unauthenticated Cross Site Scripting (XSS) in CformsII <= 15.1.3 versions.
Shop manager PHP Object Injection in CTX Feed <= 6.6.26 versions.
CVE-2026-39434
Shop manager PHP Object Injection in CTX Feed <= 6.6.26 versions.
Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 4.6.3 versions.
CVE-2026-34902
Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 4.6.3 versions.
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 versions.
CVE-2026-34900
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 versions.
Unauthenticated Broken Access Control in Event Tickets Manager for WooCommerce <= 1.5.3 versions.
CVE-2026-34898
Unauthenticated Broken Access Control in Event Tickets Manager for WooCommerce <= 1.5.3 versions.
Subscriber Broken Access Control in Rank Math SEO <= 1.0.271 versions.
CVE-2026-34892
Subscriber Broken Access Control in Rank Math SEO <= 1.0.271 versions.
Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions.
CVE-2026-34886
Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions.