The Solace Extra WordPress plugin before 1.6.1 does not perform capability or nonce checks in one...
CVE-2026-16965
The Solace Extra WordPress plugin before 1.6.1 does not perform capability or nonce checks in one of its AJAX actions, a
2026-08-10 归档
今日共收录 768 条安全情报，包含 81 个 CVE，374 篇安全通告，以及 66 篇研究论文。
← 返回归档列表The CubeWP Framework WordPress plugin before 1.1.31 does not properly sanitize and escape a...
CVE-2026-17017
The CubeWP Framework WordPress plugin before 1.1.31 does not properly sanitize and escape a parameter before using it in
The Create WordPress plugin before 2.5.4 does not perform an authorization check before returning...
CVE-2026-16992
The Create WordPress plugin before 2.5.4 does not perform an authorization check before returning content over one of it
The Iptanus File Upload WordPress plugin before 5.1.8 does not properly sanitise and escape a...
CVE-2026-17044
The Iptanus File Upload WordPress plugin before 5.1.8 does not properly sanitise and escape a parameter before using it
A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36b0af6ee7c7f3e6ce8e08cda2170...
CVE-2026-19333
A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36b0af6ee7c7f3e6ce8e08cda2170/db03237d92f7dc2f0da0d70a
The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted...
CVE-2026-16032
The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted through an unauthenticated an
A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element...
CVE-2026-19330
A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function create_s
A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9....
CVE-2026-19334
A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9. This affects an unknown pa
A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0. Affected by this...
CVE-2026-19332
A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0. Affected by this vulnerability is an unknown functi
A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0. This affects the...
CVE-2026-19331
A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0. This affects the function readCanvas/writeCanva
The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify the site-connection...
CVE-2026-15038
The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify the site-connection state and the authenti
A vulnerability was found in andreahaku codex_mcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390....
CVE-2026-19329
A vulnerability was found in andreahaku codex_mcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. The affected element i
A flaw has been found in abracadabra50 claude-sesh 1.0.0. This issue affects the function...
CVE-2026-19327
A flaw has been found in abracadabra50 claude-sesh 1.0.0. This issue affects the function getEnrichedData/enrichSession
A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1. This vulnerability affects the...
CVE-2026-19326
A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1. This vulnerability affects the function deleteImage of the
A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0. Impacted is the function...
CVE-2026-19328
A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0. Impacted is the function getInstalledSkills/insta
A security vulnerability has been detected in IncomeStreamSurfer roo-code-memory-bank-mcp-server...
CVE-2026-19325
A security vulnerability has been detected in IncomeStreamSurfer roo-code-memory-bank-mcp-server up to 9dcb2fb5e6b65a35a
Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in...
CVE-2026-17510
Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero leng
A weakness has been identified in HelloGGX shadcn-vue-mcp up to...
CVE-2026-19324
A weakness has been identified in HelloGGX shadcn-vue-mcp up to e170e277b94235cde627803277fc8c41103a4d38. Affected by th
A security flaw has been discovered in azer react-analyzer-mcp up to...
CVE-2026-19323
A security flaw has been discovered in azer react-analyzer-mcp up to 335f2a3585f265e2e88352b59b10d3b478d678b0. Affected
CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient...
CVE-2026-71502
CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vue template