今日共收录 918 条安全情报，包含 88 个 CVE，417 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-74851
The Pods WordPress plugin before 3.3.9.1 does not correctly compare a display callback against its list of blocked func
CVE-2026-58097
mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the
CVE-2026-58094
The FIOSSHMLPGCNF ioctl(2) operation configures the page size for a largepage shared memory object. This is intended to
CVE-2026-58093
The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty loc
CVE-2026-19760
The WP Fastest Cache – WordPress Cache Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP
CVE-2026-19718
The BlogVault Backup & Staging WordPress plugin before 6.65, MalCare WordPress Security Plugin WordPress plugin before
CVE-2026-19226
The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not validate some widget settings before outputtin
CVE-2026-19220
The Forminator Forms WordPress plugin before 1.57.1 does not verify that site registration is enabled on the network be
CVE-2026-19094
The Tutor LMS WordPress plugin before 4.0.6 does not validate values used to build a database query, and does not restr
CVE-2026-16986
The Booking Package WordPress plugin before 1.7.25 does not validate the payment amount server-side against the stored s
CVE-2026-16984
The Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates WordPress plugin bef
CVE-2026-15203
Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3
CVE-2026-14550
The WPCafe WordPress plugin before 3.0.18 does not perform an authorization check when creating a reservation through i
CVE-2026-14216
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.7 does not require authentication before p
CVE-2026-14212
The Booking for Appointments and Events Calendar WordPress plugin before 9.8 does not verify that an authenticated empl
CVE-2026-13406
The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or nonce check before r
CVE-2026-13404
The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or ownership check (rel
CVE-2026-13172
The Eventin WordPress plugin before 4.1.22 does not restrict access to non-published content by status or ownership in
CVE-2026-9805
SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size
CVE-2026-80214
LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can exec