The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict...
CVE-2026-81200
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order informa
2026-08-30 归档
今日共收录 849 条安全情报，包含 76 个 CVE，428 篇安全通告，以及 85 篇研究论文。
← 返回归档列表The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being...
CVE-2026-76547
The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when impor
The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an...
CVE-2026-77786
The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds th
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a...
CVE-2026-80311
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a subscription belongs to th
The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end...
CVE-2026-76548
The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, gr
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not...
CVE-2026-77007
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform any authorisation
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its...
CVE-2026-18234
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet payment handling be
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not...
CVE-2026-77008
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or
The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does...
CVE-2026-76586
The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does not verify the amount
The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its...
CVE-2026-76546
The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes, al
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not...
CVE-2026-77010
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation che
The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its...
CVE-2026-19430
The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST API routes, and th
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check...
CVE-2026-77704
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that a user holds the req
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of...
CVE-2026-18233
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints
The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape...
CVE-2026-80488
The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values be
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect...
CVE-2026-81342
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied dur
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount,...
CVE-2026-81026
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or s
The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when...
CVE-2026-17522
The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving one of its setti
The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently...
CVE-2026-17520
The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently random source, deriving
The MemberHero WordPress plugin through 6.9 does not restrict which account fields can be...
CVE-2026-10522
The MemberHero WordPress plugin through 6.9 does not restrict which account fields can be supplied during its frontend