今日共收录 1407 条安全情报，包含 491 个 CVE，487 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-8151
The Simple Membership MailChimp Integration WordPress plugin before 1.9.8 does not have CSRF checks in its settings page
CVE-2026-83547
The Xpro Addons WordPress plugin before 1.7.4 does not properly escape some of its widgets' settings before outputting t
CVE-2026-83533
The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed
CVE-2026-82884
The All in One SEO WordPress plugin before 5.0.0.1 does not sanitise and escape some content stored in posts before rend
CVE-2026-82293
Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to unauthorized resource consumption v
CVE-2026-81571
The Brave WordPress plugin before 0.8.8 does not prevent a URL parameter used to pre-fill a form field from being passed
CVE-2026-79991
Craft CMS GraphQL entry mutation resolvers (saveEntry, deleteEntry) read siteIddirectly from$argumentswithout passing th
CVE-2026-79990
Craft CMS GraphQL entry mutation resolvers (saveEntry, deleteEntry) read siteIddirectly from$argumentswithout passing th
CVE-2026-79989
The vulnerability allows any authenticated user to change their own password without providing the current password or h
CVE-2026-78609
Incorrect Authorization (CWE-863) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized modification of data via
CVE-2026-78604
Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege escalation
CVE-2026-78602
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in Elastic Maps Server can lead
CVE-2026-78601
Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122). An authori
CVE-2026-78600
Incomplete Cleanup (CWE-459) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized access via Privilege Abuse (C
CVE-2026-78599
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can
CVE-2026-78598
Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to information disclosure via Exploiti
CVE-2026-78594
Improper Handling of Highly Compressed Data (CWE-409) in APM Server can lead to a persistent denial of service via Exces
CVE-2026-78591
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can
CVE-2026-78590
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can
CVE-2026-78588
Allocation of Resources Without Limits or Throttling (CWE-770) in Filebeat can lead to a denial of service via Excessive