The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to...
CVE-2026-75816
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all
2026-09-06 归档
今日共收录 918 条安全情报，包含 147 个 CVE，434 篇安全通告，以及 81 篇研究论文。
← 返回归档列表The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the...
CVE-2026-18056
The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter
A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer:...
CVE-2026-86153
A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of th
The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all...
CVE-2026-16310
The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includi
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown...
CVE-2026-86149
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetC
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function...
CVE-2026-86151
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the...
CVE-2026-86148
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the f
WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows...
CVE-2026-86189
WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated attackers to w
AVideo with YPTSocket plugin enabled contains a cross-site scripting vulnerability allowing...
CVE-2026-86188
AVideo with YPTSocket plugin enabled contains a cross-site scripting vulnerability allowing unauthenticated attackers to
WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that...
CVE-2026-86190
WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user record
The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for...
CVE-2026-10196
The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to
Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot...
CVE-2026-86184
Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot-login route that allows un
ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when...
CVE-2025-15614
ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z arc
MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler...
CVE-2026-86173
MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unaut
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that...
CVE-2026-86124
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces
Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME...
CVE-2026-86121
Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and
Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing...
CVE-2026-86122
Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure ar
Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability...
CVE-2026-86119
Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/
The Joli Table Of Contents WordPress plugin before 3.0.3 does not sanitise or escape a shortcode...
CVE-2026-84931
The Joli Table Of Contents WordPress plugin before 3.0.3 does not sanitise or escape a shortcode attribute value before
The JCH Optimize WordPress plugin before 6.0.1 does not perform a capability check on one of its...
CVE-2026-84934
The JCH Optimize WordPress plugin before 6.0.1 does not perform a capability check on one of its authenticated AJAX acti