今日共收录 1407 条安全情报，包含 491 个 CVE，487 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-16966
The Solace Extra WordPress plugin before 1.7.0 does not perform any authorization or post-status checks in one of its AJ
CVE-2026-15232
The MotoPress Appointment Booking WordPress plugin before 2.4.8 does not perform an authorization or ownership check whe
CVE-2026-14357
The DevKit Pro plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.3.0. This
CVE-2026-14215
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not require authentication or a val
CVE-2026-12865
The Photo Gallery by 10Web WordPress plugin before 1.8.44 does not escape two request parameters before reflecting them
CVE-2026-12526
The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not verify that the requester is authorized to
CVE-2025-15664
The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's b
CVE-2025-15663
The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's a
CVE-2025-46418
Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition.
CVE-2024-35585
Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication.
CVE-2026-3851
The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Dynamic Content feature's legacy JSON
CVE-2026-19754
Baserow 2.3.3 contains a SQL injection vulnerability in the index() formula function. A low-privileged authenticated use
CVE-2026-84442
A vulnerability was identified in MapQuest Get Directions App 10.16.1 on Android. This vulnerability affects the functio
CVE-2026-84441
A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some unknown functionality
CVE-2026-14982
The WP File Download plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validat
CVE-2026-14957
In FIPS mode, Libreswan's add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts that the result is not N
CVE-2026-84715
FeatherPanel versions before 1.3.7.10 fail to validate permissions in the SubuserController updateSubuser handler, allow
CVE-2026-84485
APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing
CVE-2026-84438
A vulnerability was determined in OpenCart 4.1.0.3/4.1.0.4. This affects an unknown function of the file catalog/control
CVE-2026-84437
A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown function of the file catalog/c