The Masteriyo LMS – LMS Course Builder, Quizzes & Certificates plugin for WordPress is vulnerable...
CVE-2026-11773
The Masteriyo LMS – LMS Course Builder, Quizzes & Certificates plugin for WordPress is vulnerable to authorization bypas
2026-06-28 归档
今日共收录 725 条安全情报，包含 41 个 CVE，384 篇安全通告，以及 89 篇研究论文。
← 返回归档列表The Product Specifications for WooCommerce plugin for WordPress is vulnerable to unauthorized...
CVE-2026-11364
The Product Specifications for WooCommerce plugin for WordPress is vulnerable to unauthorized modification, creation, an
The Shariff for WordPress Shariff for WordPress plugin through 1.0.11 does not sanitize or escape...
CVE-2026-9677
The Shariff for WordPress Shariff for WordPress plugin through 1.0.11 does not sanitize or escape the shariff_infourl se
The MaxButtons – Create buttons plugin for WordPress is vulnerable to Reflected Cross-Site...
CVE-2026-13245
The MaxButtons – Create buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'view' para
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to...
CVE-2026-12404
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all ve
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &...
CVE-2026-10820
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress pl
The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-13335
The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpm_point
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework...
CVE-2023-37524
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of servi
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to...
CVE-2026-13333
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection
The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-11356
The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'menu_t
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a sensitive data exposure...
CVE-2025-59868
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a sensitive data exposure vulnerability which could allow an
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to...
CVE-2026-13331
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection
The HD Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 2.2.0 to...
CVE-2026-13422
The HD Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 2.2.0 to 2.2.1. This is due to
The DMP-5000 devices are shipped with a default administrative web account with weak...
CVE-2026-31928
The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are
A vulnerability exists in H.View IP cameras that could allow an authenticated user to supply...
CVE-2026-55975
A vulnerability exists in H.View IP cameras that could allow an authenticated user to supply unsanitized XML fields to t
The DMP-5000 file service exposes authenticated arbitrary file upload functionality. There are...
CVE-2026-33560
The DMP-5000 file service exposes authenticated arbitrary file upload functionality. There are exposed endpoints which a
A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow...
CVE-2026-56414
A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arb
Cross-Site Scripting (XSS) vulnerability in the patron restriction type administration page of...
CVE-2026-50765
Cross-Site Scripting (XSS) vulnerability in the patron restriction type administration page of Koha Library Management S
A stored cross-site scripting (XSS) vulnerability in the OPAC item detail page of Koha Library...
CVE-2026-50766
A stored cross-site scripting (XSS) vulnerability in the OPAC item detail page of Koha Library Management System through
Cleartext storage and exposure of WPA2 credentials, and missing authentication on the rr/wr...
CVE-2026-38571
Cleartext storage and exposure of WPA2 credentials, and missing authentication on the rr/wr memory read/write commands,