The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that...
CVE-2026-57828
The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered user
2026-07-12 归档
今日共收录 877 条安全情报，包含 71 个 CVE，468 篇安全通告，以及 78 篇研究论文。
← 返回归档列表The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that...
CVE-2026-57827
The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable
The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up...
CVE-2026-9282
The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.4
The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to authorization...
CVE-2026-12994
The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions u
The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable...
CVE-2026-4661
The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to time-based blind SQ
The bbp Style Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions...
CVE-2026-15010
The bbp Style Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6
The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting...
CVE-2026-11591
The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in a
The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all...
CVE-2026-6801
The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includin
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to...
CVE-2026-9017
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all ve
The fresh Podcaster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...
CVE-2026-1382
The fresh Podcaster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'freshpodcaster' shortcode
The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable...
CVE-2026-12738
The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypas
The WP Hotel Booking plugin for WordPress is vulnerable to Insufficient Verification of Data...
CVE-2026-11901
The WP Hotel Booking plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all version
The Genolve – AI image AI video generation plugin for WordPress is vulnerable to unauthorized...
CVE-2026-1359
The Genolve – AI image AI video generation plugin for WordPress is vulnerable to unauthorized modification of data due t
The White Label CMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin...
CVE-2026-11898
The White Label CMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions
The Wallet for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all...
CVE-2026-12103
The Wallet for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress...
CVE-2026-15155
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Authent
The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable...
CVE-2026-12126
The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site S
The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to Insecure Direct...
CVE-2026-10041
The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in al
The Code Engine plugin for WordPress is vulnerable to Remote Code Execution in all versions up to...
CVE-2025-6784
The Code Engine plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 0.3.5
The Catalyst Connect Zoho CRM Client Portal plugin for WordPress is vulnerable to time-based SQL...
CVE-2025-5017
The Catalyst Connect Zoho CRM Client Portal plugin for WordPress is vulnerable to time-based SQL Injection via the ‘uid’