今日共收录 1697 条安全情报，包含 762 个 CVE，507 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-3129
The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted `` tag attributes in a
CVE-2026-18983
The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all vers
CVE-2026-18978
The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all version
CVE-2026-18324
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cro
CVE-2026-16759
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Remote Code Execution limited
CVE-2026-16654
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'size' Shortcode Attrib
CVE-2026-15798
The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'slider' Block Attribute in all
CVE-2026-78618
A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operatio
CVE-2026-78617
WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowin
CVE-2026-78616
A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows
CVE-2026-78615
A Reflected Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's report detail page allows an attacker to
CVE-2026-78614
WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an a
CVE-2026-78613
WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an aut
CVE-2026-78612
WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows
CVE-2026-78610
WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker
CVE-2026-78500
A blind server-side request forgery (SSRF) vulnerability WatchGuard Dimension Database Server Test configuration allows
CVE-2026-78499
A server-side request forgery (SSRF) vulnerability WatchGuard Dimension FTP Server Test configuration allows an authenti
CVE-2026-78498
A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Email Server Test configuration allows an authen
CVE-2026-78495
A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allo
CVE-2026-78195
A Cross-Site Scripting (XSS) vulnerability in the WatchGuard Dimension Backup Historical Data feature allows an authenti