The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a...
CVE-2026-2354
The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a flawed file type validatio
2026-07-12 归档
今日共收录 877 条安全情报，包含 71 个 CVE，468 篇安全通告，以及 78 篇研究论文。
← 返回归档列表The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure...
CVE-2026-13116
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference
The SurfLink - Ultimate Link Manager plugin for WordPress is vulnerable to unauthorized data...
CVE-2026-3552
The SurfLink - Ultimate Link Manager plugin for WordPress is vulnerable to unauthorized data modification due to a missi
The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-13378
The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contac
The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...
CVE-2026-15097
The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'height_slider' Slider Module
The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request...
CVE-2026-3576
The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local
The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Map...
CVE-2026-15096
The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Map Module 'b_width_map' Field
The Affilia – Affiliate Program & Referral Tracking for WordPress plugin for WordPress is...
CVE-2026-7559
The Affilia – Affiliate Program & Referral Tracking for WordPress plugin for WordPress is vulnerable to unauthorized acc
The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Missing...
CVE-2026-6803
The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Missing Authorization in all versions
The Print, PDF, Email by PrintFriendly plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-9738
The Print, PDF, Email by PrintFriendly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conten
The Solace Extra plugin for WordPress is vulnerable to authorization bypass in all versions up to...
CVE-2026-13250
The Solace Extra plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.3.
The Notification for Telegram plugin for WordPress is vulnerable to authorization bypass in all...
CVE-2026-7620
The Notification for Telegram plugin for WordPress is vulnerable to authorization bypass in all versions up to, and incl
The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to authorization...
CVE-2026-6804
The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to authorization bypass in all versions
The Booking Package plugin for WordPress is vulnerable to generic SQL Injection via 'email' Form...
CVE-2026-15335
The Booking Package plugin for WordPress is vulnerable to generic SQL Injection via 'email' Form Parameter (form) in all
The Points and Rewards for WooCommerce plugin for WordPress is vulnerable to authorization bypass...
CVE-2026-10628
The Points and Rewards for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to,
The Mux Video Uploader plugin for WordPress is vulnerable to Sensitive Information Exposure in...
CVE-2026-7544
The Mux Video Uploader plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and i
The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is...
CVE-2026-12141
The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored C
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File...
CVE-2026-15338
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to
The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to...
CVE-2026-15073
The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generic SQL Injection via
The MyParcel plugin for WordPress is vulnerable to authorization bypass in all versions up to,...
CVE-2026-8678
The MyParcel plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.25.1. Th