The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its...
CVE-2026-18234
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet payment handling be
2026-08-29 归档
今日共收录 1687 条安全情报，包含 687 个 CVE，604 篇安全通告，以及 114 篇研究论文。
← 返回归档列表The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not...
CVE-2026-77008
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or
The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does...
CVE-2026-76586
The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does not verify the amount
The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its...
CVE-2026-76546
The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes, al
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not...
CVE-2026-77010
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation che
The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its...
CVE-2026-19430
The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST API routes, and th
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check...
CVE-2026-77704
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that a user holds the req
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of...
CVE-2026-18233
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints
The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape...
CVE-2026-80488
The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values be
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of...
CVE-2026-77012
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated end
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect...
CVE-2026-81342
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied dur
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount,...
CVE-2026-81026
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or s
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified...
CVE-2026-16259
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthentic
The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when...
CVE-2026-17522
The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving one of its setti
The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently...
CVE-2026-17520
The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently random source, deriving
The MemberHero WordPress plugin through 6.9 does not restrict which account fields can be...
CVE-2026-10522
The MemberHero WordPress plugin through 6.9 does not restrict which account fields can be supplied during its frontend
The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its...
CVE-2026-16600
The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its AJAX actions and does
The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from...
CVE-2026-16061
The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from the URL of one of its
A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when...
CVE-2026-76651
A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when...
CVE-2026-76650
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable