Unauthenticated Path Traversal in FastDup <= 2.7.2 versions.
CVE-2026-52703
Unauthenticated Path Traversal in FastDup <= 2.7.2 versions.
2026-06-16 归档
今日共收录 1237 条安全情报，包含 420 个 CVE，450 篇安全通告，以及 98 篇研究论文。
← 返回归档列表Unauthenticated PHP Object Injection in Integration for Mailchimp and Contact Form 7, WPForms,...
CVE-2026-49765
Unauthenticated PHP Object Injection in Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms <=
Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress:...
CVE-2026-49776
Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websit
Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor,...
CVE-2026-49085
Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms
Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor,...
CVE-2026-49105
Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <=
Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7,...
CVE-2026-49104
Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formid
Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact <= 1...
CVE-2026-49106
Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact <= 1.1.6 versions.
Unauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot <= 1.3.7 versions.
CVE-2026-49763
Unauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot <= 1.3.7 versions.
Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce <= 1.9.5 versions.
CVE-2026-49065
Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce <= 1.9.5 versions.
Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions.
CVE-2026-49067
Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions.
Unauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms,...
CVE-2026-49109
Unauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, N
Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.8.6 versions.
CVE-2026-49764
Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.8.6 versions.
Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions.
CVE-2026-48836
Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions.
Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions.
CVE-2026-48886
Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions.
Unauthenticated Broken Access Control in TrueBooker <= 1.1.9 versions.
CVE-2026-48881
Unauthenticated Broken Access Control in TrueBooker <= 1.1.9 versions.
Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions.
CVE-2026-45439
Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions.
Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.
CVE-2026-42665
Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.
Netty: HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted
CVE-2026-50020
## Summary Before reading the first request-line, `HttpObjectDecoder` skips every byte for which `Character.isISOContro
UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`
CVE-2026-48125
### Summary A regular expression denial-of-service (ReDoS) vulnerability has been discovered in `ua-parser-js` when usi
Firewall for AI
Firewall for AI