The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-15644
The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'st
2026-08-02 归档
今日共收录 946 条安全情报，包含 146 个 CVE，466 篇安全通告，以及 75 篇研究论文。
← 返回归档列表The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress...
CVE-2026-16090
The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable...
CVE-2026-15988
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request F
The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is...
CVE-2026-15662
The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Sit
The Icegram Mailer plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter...
CVE-2026-15951
The Icegram Mailer plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in versions up to, and
The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-15649
The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Sho
The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-15645
The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'na
The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress...
CVE-2026-16091
The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is
The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form...
CVE-2026-11995
The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress
The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is...
CVE-2026-15052
The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cr
The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in...
CVE-2026-2916
The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, an
The Icegram Engage – Popups, Optins, CTAs & Lead Generation plugin for WordPress is vulnerable to...
CVE-2026-16087
The Icegram Engage – Popups, Optins, CTAs & Lead Generation plugin for WordPress is vulnerable to second-order SQL Injec
The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file...
CVE-2026-15450
The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file deletion via path trav
guard-livereload has a directory traversal vulnerability
CVE-2016-1000305
The vulnerability allows remote attackers to read arbitrary files on the server by exploiting improper path validation i
Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute
CVE-2026-54909
### Impact Remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute ### Patches Upgrad
@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag
CVE-2026-53608
### Summary The `@apostrophecms/seo` package injects the Google Analytics Tracking ID (`seoGoogleTrackingId`) and Go
@apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host header
CVE-2026-53607
### Summary When `prettyUrls: true` is enabled on `@apostrophecms/file` (a documented SEO feature for serving uploaded
free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure
CVE-2026-53551
### Summary The free5GC AUSF (Authentication Server Function) does not validate the `supiOrSuci` field in UE authentica
Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers
CVE-2026-53599
## Summary `rex_mediapool::isAllowedExtension` in `redaxo/src/addons/mediapool/lib/mediapool.php` accepts filenames th
ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow
CVE-2026-53466
An integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read and that can res