The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
CVE-2026-2357
The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bt_bb_shortcod
2026-08-17 归档
今日共收录 803 条安全情报，包含 111 个 CVE，370 篇安全通告，以及 71 篇研究论文。
← 返回归档列表In the Linux kernel, the following vulnerability has been resolved: crypto: algif_skcipher -...
CVE-2026-74578
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_skcipher - force synchronous processi
The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable...
CVE-2026-13424
The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Sc
The Infility Global plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...
CVE-2026-10734
The Infility Global plugin for WordPress is vulnerable to Stored Cross-Site Scripting via /cf7_record Log Endpoint in al
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
CVE-2026-12998
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure D
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to...
CVE-2026-17608
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forg
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is...
CVE-2026-17087
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to authorization
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is...
CVE-2026-17604
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversa
The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up...
CVE-2026-17582
The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up to, and including, 9.1.7
The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the...
CVE-2026-19726
The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuration of its charts, all
The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id'...
CVE-2026-2283
The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id' parameter in all versions u
The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to...
CVE-2026-9767
The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'or
The Premium Packages WordPress plugin before 7.0.7 does not validate a withdrawal request...
CVE-2026-19711
The Premium Packages WordPress plugin before 7.0.7 does not validate a withdrawal request against the requesting user's
The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before...
CVE-2026-19712
The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before outputting it back in
The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify...
CVE-2026-19728
The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify that the requester is
The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored...
CVE-2026-18402
The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting v
A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an...
CVE-2026-19934
A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the f
The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have...
CVE-2026-19717
The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some o
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a...
CVE-2026-19725
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a value taken from an unauth
The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one...
CVE-2026-19613
The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one of its dynamic repeate