今日共收录 803 条安全情报，包含 111 个 CVE，370 篇安全通告，以及 71 篇研究论文。
← 返回归档列表CVE-2024-58375
OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into
CVE-2026-74251
Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (a
CVE-2026-74578
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_skcipher - force synchronous processi
CVE-2026-2497
The Gallery by BestWebSoft plugin for WordPress is vulnerable to SQL Injection via the '_gallery_order_{post_id}' parame
CVE-2026-2357
The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bt_bb_shortcod
CVE-2026-18347
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypa
CVE-2026-17608
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forg
CVE-2026-17604
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversa
CVE-2026-17087
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to authorization
CVE-2026-13424
The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Sc
CVE-2026-12998
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure D
CVE-2026-10734
The Infility Global plugin for WordPress is vulnerable to Stored Cross-Site Scripting via /cf7_record Log Endpoint in al
CVE-2026-9767
The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'or
CVE-2026-2283
The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id' parameter in all versions u
CVE-2026-19934
A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the f
CVE-2026-19728
The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify that the requester is
CVE-2026-19726
The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuration of its charts, all
CVE-2026-19725
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a value taken from an unauth
CVE-2026-19717
The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some o
CVE-2026-19714
The Simple JWT Login WordPress plugin before 3.6.8 does not validate the audience of the Google identity tokens it acce