The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-12231
The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ exad_info
2026-08-03 归档
今日共收录 797 条安全情报，包含 119 个 CVE，373 篇安全通告，以及 59 篇研究论文。
← 返回归档列表A flaw was found in the keycloak-services component of Keycloak, which is used for managing...
CVE-2026-18573
A flaw was found in the keycloak-services component of Keycloak, which is used for managing authentication and authoriza
A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services...
CVE-2026-18570
A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component. This componen
Keycloak provides authorization services that allow administrators to restrict access to...
CVE-2026-18572
Keycloak provides authorization services that allow administrators to restrict access to resources based on time policie
The Simply Schedule Appointments WordPress plugin before 1.6.12.6 does not correctly restrict a...
CVE-2026-16540
The Simply Schedule Appointments WordPress plugin before 1.6.12.6 does not correctly restrict a bulk appointment operati
The ProfileGrid WordPress plugin before 5.9.9.8 does not verify that a notification belongs to...
CVE-2026-16291
The ProfileGrid WordPress plugin before 5.9.9.8 does not verify that a notification belongs to the requesting user befo
A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions...
CVE-2026-18571
A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled.
The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation...
CVE-2026-16292
The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its file-meta
The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the...
CVE-2026-16062
The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the deserialization of user-co
The POUCO Import Users WordPress plugin through 1.0.0 does not perform any capability or nonce...
CVE-2026-16256
The POUCO Import Users WordPress plugin through 1.0.0 does not perform any capability or nonce checks on AJAX actions av
The Meta Box WordPress plugin before 5.13.1 does not verify that a user is authorized to delete...
CVE-2026-15248
The Meta Box WordPress plugin before 5.13.1 does not verify that a user is authorized to delete the supplied attachment
The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a...
CVE-2026-15151
The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its
The RT Mega Menu WordPress plugin before 1.5.2 does not perform a capability check on the AJAX...
CVE-2026-15385
The RT Mega Menu WordPress plugin before 1.5.2 does not perform a capability check on the AJAX action that saves mega-m
The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any...
CVE-2026-16285
The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before str
The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache...
CVE-2026-16042
The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache-clearing actions, allowin
The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not properly verify...
CVE-2026-16064
The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not properly verify authorization on the o
The Simple Restrict WordPress plugin before 1.2.9 does not enforce its content-restriction...
CVE-2026-15939
The Simple Restrict WordPress plugin before 1.2.9 does not enforce its content-restriction permission check on the REST
The Gallery for Google Photos WordPress plugin before 1.2.1 does not properly restrict access to...
CVE-2026-15236
The Gallery for Google Photos WordPress plugin before 1.2.1 does not properly restrict access to the stored third-party
The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a...
CVE-2026-14938
The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a board import operation be
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。
Paper专业的技术文章，安全经验的积累。Paper 栏目专注于安全技术文章的收录。我们推崇黑客精神，技术分享和热衷解决问题及超越极限，Seebug Paper 期待您的分享。