Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions.
CVE-2026-28175
Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions.
2026-08-14 归档
今日共收录 1589 条安全情报，包含 784 个 CVE，406 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.
CVE-2026-28174
Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.
Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions.
CVE-2026-28173
Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions.
Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions.
CVE-2026-28170
Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions.
Subscriber SQL Injection in CubeWP <= 1.1.30 versions.
CVE-2026-28168
Subscriber SQL Injection in CubeWP <= 1.1.30 versions.
Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.
CVE-2026-28161
Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.
Subscriber Broken Access Control in Service Finder Booking <= 6.2 versions.
CVE-2026-28159
Subscriber Broken Access Control in Service Finder Booking <= 6.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions.
CVE-2026-28158
Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions.
Subscriber Path Traversal in Do Lasso <= 358 versions.
CVE-2026-28157
Subscriber Path Traversal in Do Lasso <= 358 versions.
Subscriber SQL Injection in Do Lasso <= 358 versions.
CVE-2026-28156
Subscriber SQL Injection in Do Lasso <= 358 versions.
Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.
CVE-2026-28155
Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.
CVE-2026-28004
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.
Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions.
CVE-2026-28003
Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics...
CVE-2026-28002
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics
Subscriber Broken Access Control in Tourfic <= 2.23.1 versions.
CVE-2026-27999
Subscriber Broken Access Control in Tourfic <= 2.23.1 versions.
Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.
CVE-2026-27543
Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions.
CVE-2026-27539
Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions.
Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.
CVE-2026-27538
Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.
Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions.
CVE-2026-27537
Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions.
Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions.
CVE-2026-27536
Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions.