The WP Directory Kit WordPress plugin before 1.5.7 does not sanitise and escape a parameter...
CVE-2026-18653
The WP Directory Kit WordPress plugin before 1.5.7 does not sanitise and escape a parameter before using it in a SQL sta
2026-08-17 归档
今日共收录 803 条安全情报，包含 111 个 CVE，370 篇安全通告，以及 71 篇研究论文。
← 返回归档列表The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to,...
CVE-2026-15441
The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 vi
A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2...
CVE-2026-19933
A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the func
The Toocheke Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting in...
CVE-2026-15604
The Toocheke Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and includin
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable...
CVE-2026-15963
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to generic SQL Injectio
The Turnkey bbPress by WeaverTheme plugin for WordPress is vulnerable to PHP Object Injection in...
CVE-2026-10035
The Turnkey bbPress by WeaverTheme plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and
The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its...
CVE-2026-17533
The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its migration import functionalit
The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file deletion due...
CVE-2026-16099
The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file pat
The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all...
CVE-2026-16779
The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includin
The Youtube Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting in...
CVE-2026-15790
The Youtube Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including,
The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in...
CVE-2026-17123
The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and incl
The Manual Image Crop WordPress plugin before 1.15 does not perform any capability check or nonce...
CVE-2026-15384
The Manual Image Crop WordPress plugin before 1.15 does not perform any capability check or nonce verification on the au
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is...
CVE-2026-16775
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cros
A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue...
CVE-2026-19932
A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function Groovy
The Snippet Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-16758
The Snippet Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all
The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Code...
CVE-2026-17581
The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Code Injection via the 'the
The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for...
CVE-2026-15351
The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for WordPress is vulnerable to
The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow...
CVE-2026-13712
The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow module settings before ou
The Fullscreen Galleria plugin for WordPress is vulnerable to generic SQL Injection via 'href'...
CVE-2026-16079
The Fullscreen Galleria plugin for WordPress is vulnerable to generic SQL Injection via 'href' Attribute in Post Content
The Serious Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'theme'...
CVE-2026-15726
The Serious Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'theme' Shortcode Attribute in