今日共收录 1407 条安全情报，包含 491 个 CVE，487 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-81194
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retriev
CVE-2026-80467
The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not restrict the role submitted through its fr
CVE-2026-79621
The CatalogX WordPress plugin before 6.1.3 does not sanitise or escape content that an unauthenticated user can store b
CVE-2026-78151
The FormLayer WordPress plugin before 1.0.9 does not perform any authorization check before returning a form's full stor
CVE-2026-77792
The RegistrationMagic WordPress plugin before 6.0.9.9 does not escape a registration form field value before outputting
CVE-2026-77788
The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the metadata row being updated belongs to the ob
CVE-2026-77787
The Rank Math SEO WordPress plugin before 1.0.277 does not perform a capability check when bulk metadata updates target
CVE-2026-77785
The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the requesting user is permitted to read the spe
CVE-2026-77784
The Rank Math SEO WordPress plugin before 1.0.277 does not verify that a user is allowed to edit the object being modif
CVE-2026-77783
The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the post whose schema it renders on the front en
CVE-2026-77782
The Rank Math SEO WordPress plugin before 1.0.277.1 does not check whether a post is password protected before using it
CVE-2026-77764
The GamiPress WordPress plugin before 7.9.9.6 does not properly restrict its video watch-tracking functionality, allowi
CVE-2026-74927
The MultiVendorX WordPress plugin before 5.0.15 does not have proper authorisation controls on one of its REST API list
CVE-2026-19723
The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not properly escape a value tak
CVE-2026-19719
The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title befor
CVE-2026-19704
The Comments WordPress plugin before 7.6.66 does not validate a value used to build a database query, allowing unauthen
CVE-2026-19453
The JetBackup WordPress plugin before 3.1.23.5 does not verify the role or capabilities of the account it preserves acr
CVE-2026-19251
The Ultimate Member WordPress plugin before 2.13.0 does not check whether a comment has been approved, or whether the p
CVE-2026-19116
The User Frontend WordPress plugin before 4.3.11 does not prevent user-supplied field values from being deserialized wh
CVE-2026-16983
The Gutentor WordPress plugin before 4.0.6 does not apply the correct context restriction to one of its REST endpoints,