2026-07-14 归档

今日共收录 1138 条安全情报，包含 379 个 CVE，396 篇安全通告，以及 80 篇研究论文。

漏洞预警2026-07-13 发布INFO

Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC Real Testimonials testimonial-free allows Object Injection.This issue affects Real Testimonials: from n/a thr...

CVE-2026-59521

Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC Real Testimonials testimonial-free allows Object Inj

历史摘要 · 未重新核验 · NVD

#cve #cwe-502

漏洞预警2026-07-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Room 34 Creative Services, LLC ICS Calendar ics-calendar allows Reflected X...

CVE-2026-59516

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Room 34 Creative S

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Funnel Builder by FunnelKit funnel-builder allows Reflected XSS.T...

CVE-2026-57816

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Funnel B

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-13 发布INFO

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Path T...

CVE-2026-57815

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMU DEV - Your All-in-O

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-07-13 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows ...

CVE-2026-57814

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your Al

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-07-13 发布INFO

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels...

CVE-2026-57812

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploit

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-07-13 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Inj...

CVE-2026-57810

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExpe

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-07-13 发布INFO

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Tonda tonda allows PHP Local File Inclusio...

CVE-2026-57805

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-07-13 发布INFO

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem...

CVE-2026-57804

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-07-13 发布INFO

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur Core struktur-core allows PHP Loc...

CVE-2026-57803

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-07-13 发布INFO

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur struktur allows PHP Local File In...

CVE-2026-57802

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-07-13 发布INFO

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes SetSail setsail allows PHP Local File Incl...

CVE-2026-57801

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-07-13 发布INFO

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Nuss nuss allows PHP Local File Inclusion.This iss...

CVE-2026-57799

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-07-13 发布INFO

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SaurabhSharma NewsPlus Shortcodes newsplus-shortcodes al...

CVE-2026-57798

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-07-13 发布INFO

Missing Authorization vulnerability in ThemeMove EduMall edumall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EduMall: from n/a thr...

CVE-2026-57797

Missing Authorization vulnerability in ThemeMove EduMall edumall allows Exploiting Incorrectly Configured Access Control

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-07-13 发布INFO

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in VLThemes Leedo leedo allows PHP Local File Inclusion.Thi...

CVE-2026-57796

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-07-13 发布INFO

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themelexus Kitchor kitchor allows PHP Local File Inclusi...

CVE-2026-57795

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-07-13 发布INFO

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Golo Framework golo-framework allows PHP Local Fil...

CVE-2026-57794

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-07-13 发布INFO

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Flow flow allows PHP Local File Inclusion....

CVE-2026-57793

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-07-13 发布INFO

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local File Inclusion.Th...

CVE-2026-57792

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

#cve #cwe-98