The SimpLy Gallery Block & Lightbox plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-5743
The SimpLy Gallery Block & Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via block attribut
2026-07-12 归档
今日共收录 877 条安全情报，包含 71 个 CVE，468 篇安全通告，以及 78 篇研究论文。
← 返回归档列表The WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel plugin for...
CVE-2026-13353
The WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel plugin for WordPress is vulnerable to Remo
The Lockme OAuth2 calendars integration plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-3367
The Lockme OAuth2 calendars integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'App I
The Starboard Suite Reservation Calendars plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2025-13968
The Starboard Suite Reservation Calendars plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcod
The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to...
CVE-2026-15072
The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generic SQL Injection via
The Members – Membership & User Role Editor Plugin plugin for WordPress is vulnerable to...
CVE-2026-12426
The Members – Membership & User Role Editor Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to...
CVE-2026-13114
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripti
The UnderConstructionPage PRO plugin for WordPress is vulnerable to Arbitrary File Read in all...
CVE-2026-11426
The UnderConstructionPage PRO plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and inclu
The WP Grid Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up...
CVE-2026-13756
The WP Grid Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.3
vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions: *.*.
CVE-2026-15087
vulnerability in Drupal Clean RESTful allows . This issue affects Clean RESTful versions: *.*.
Previously, there was no throttling on repeated authentication attempts to the charging station...
CVE-2026-42952
Previously, there was no throttling on repeated authentication attempts to the charging station backend, which could al
Multiple connections to the backend using the same charging station ID are allowed, which could...
CVE-2026-44383
Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to de
vulnerability in Drupal Commerce guest registration allows . This issue affects Commerce guest...
CVE-2026-15089
vulnerability in Drupal Commerce guest registration allows . This issue affects Commerce guest registration versions: *.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-14286
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-58591
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox al
Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue...
CVE-2026-58589
Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue affects FlowDrop versions: f
vulnerability in Drupal Raw Formatter [Meta Tag Formatter] allows . This issue affects Raw...
CVE-2026-15086
vulnerability in Drupal Raw Formatter [Meta Tag Formatter] allows . This issue affects Raw Formatter [Meta Tag Formatter
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...
CVE-2026-58587
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canv
vulnerability in Drupal Composer allows . This issue affects Composer versions: *.*.
CVE-2026-11914
vulnerability in Drupal Composer allows . This issue affects Composer versions: *.*.
vulnerability in Drupal Brute force attack protection allows . This issue affects Brute force...
CVE-2026-11915
vulnerability in Drupal Brute force attack protection allows . This issue affects Brute force attack protection versions