Cyber Security Daily Radar

2026-09-04 归档

今日共收录 1362 条安全情报，包含 399 个 CVE，552 篇安全通告，以及 120 篇研究论文。

← 返回归档列表
漏洞预警2026-09-03 发布INFO

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Cont...

CVE-2026-85304

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templa

历史摘要 · 未重新核验 · NVD

#cve#cwe-862
漏洞预警2026-09-03 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Booking and Rental Manager allows Stored XSS. This issue a...

CVE-2026-85303

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Bo

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-09-03 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKoi WordPress Themes WPKoi Templates for Elementor allows DOM-Based XSS. ...

CVE-2026-85302

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKoi WordPress Th

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-09-03 发布INFO

PlaywrightCapture contains a server-side request forgery (SSRF) vulnerability in its favicon retrieval functionality. When only_global_lookup is enabled, the application validat...

CVE-2026-85242

PlaywrightCapture contains a server-side request forgery (SSRF) vulnerability in its favicon retrieval functionality. Wh

历史摘要 · 未重新核验 · NVD

#cve#cwe-918
漏洞预警2026-09-03 发布INFO

A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function doupdateimage of the file /customer/controller...

CVE-2026-85186

A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is th

历史摘要 · 未重新核验 · NVD

#cve#cwe-284#cwe-434
漏洞预警2026-09-03 发布INFO

Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce <= 2.3 versions.

CVE-2026-84849

Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce <= 2.3 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-290
漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager <= 9.17 versions.

CVE-2026-84848

Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager <= 9.17 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-09-03 发布INFO

Unauthenticated Broken Access Control in Quick Event Manager <= 9.17 versions.

CVE-2026-84847

Unauthenticated Broken Access Control in Quick Event Manager <= 9.17 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-862
漏洞预警2026-09-03 发布INFO

Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions.

CVE-2026-84836

Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-639
漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions.

CVE-2026-84812

Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-09-03 发布INFO

Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt &amp; MCP for AI Agents <= 1.51.0 versions.

CVE-2026-84779

Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt &amp; MCP for AI Agents <= 1.51.0 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-862
漏洞预警2026-09-03 发布INFO

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration &amp; Cloning <= 6.65 versions.

CVE-2026-84778

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration &amp; Cloning <= 6.65 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-770
漏洞预警2026-09-03 发布INFO

Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.

CVE-2026-84777

Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-288
漏洞预警2026-09-03 发布INFO

Unauthenticated Denial of Service Attack in MalCare Security <= 6.69 versions.

CVE-2026-84776

Unauthenticated Denial of Service Attack in MalCare Security <= 6.69 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-770
漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.11 versions.

CVE-2026-84774

Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.11 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.6 versions.

CVE-2026-84773

Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.6 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79
漏洞预警2026-09-03 发布INFO

Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions.

CVE-2026-84769

Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-639
漏洞预警2026-09-03 发布INFO

Unauthenticated Bypass Vulnerability in BookIt <= 2.6.0.3 versions.

CVE-2026-84767

Unauthenticated Bypass Vulnerability in BookIt <= 2.6.0.3 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-345
漏洞预警2026-09-03 发布INFO

Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.

CVE-2026-84766

Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-290
漏洞预警2026-09-03 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT <= 7.5.1 versions.

CVE-2026-84765

Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT <= 7.5.1 versions.

历史摘要 · 未重新核验 · NVD

#cve#cwe-79