2026-09-11 归档

今日共收录 1356 条安全情报，包含 483 个 CVE，489 篇安全通告，以及 100 篇研究论文。

漏洞预警2026-09-10 发布INFO

Flextype CMS through 1.0.0-alpha.3 accepts API authentication credentials through URL query string parameters in REST API routes. Attackers with access to web server, proxy, or ...

CVE-2026-88897

Flextype CMS through 1.0.0-alpha.3 accepts API authentication credentials through URL query string parameters in REST AP

历史摘要 · 未重新核验 · NVD

#cve #cwe-598

漏洞预警2026-09-10 发布INFO

Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypoint ConnContext does not call service.AddTransportOnConte...

CVE-2026-88007

Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypo

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-863

漏洞预警2026-09-10 发布INFO

Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forward...

CVE-2026-88004

Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses ali

历史摘要 · 未重新核验 · NVD

#cve #cwe-436 #cwe-807

漏洞预警2026-09-10 发布INFO

import_contacts Path Traversal in Groundhogg <= 4.7.1 versions.

CVE-2026-85310

import_contacts Path Traversal in Groundhogg <= 4.7.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-35

漏洞预警2026-09-10 发布INFO

Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versions.

CVE-2026-84821

Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.3 versions.

CVE-2026-84819

Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-10 发布INFO

Unauthenticated Cross Site Scripting (XSS) in WPCS <= 1.3.2 versions.

CVE-2026-84816

Unauthenticated Cross Site Scripting (XSS) in WPCS <= 1.3.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-10 发布INFO

Unauthenticated Privilege Escalation in SiteSkite <= 2.1.5 versions.

CVE-2026-81805

Unauthenticated Privilege Escalation in SiteSkite <= 2.1.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-266

漏洞预警2026-09-10 发布INFO

Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore & Migration <= 2.4.2 versions.

CVE-2026-81804

Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore & Migration <= 2.4.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-201

漏洞预警2026-09-10 发布INFO

Subscriber Remote Code Execution (RCE) in RepairBuddy <= 4.1224 versions.

CVE-2026-81803

Subscriber Remote Code Execution (RCE) in RepairBuddy <= 4.1224 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-94

漏洞预警2026-09-10 发布INFO

Subscriber Settings Change in WP-Stateless <= 4.4.1 versions.

CVE-2026-81801

Subscriber Settings Change in WP-Stateless <= 4.4.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

Unauthenticated Broken Authentication in WP Travel <= 12.0.3 versions.

CVE-2026-81796

Unauthenticated Broken Authentication in WP Travel <= 12.0.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-288

漏洞预警2026-09-10 发布INFO

Unauthenticated Cross Site Scripting (XSS) in Page Visits Counter – Lite <= 1.2.3 versions.

CVE-2026-81795

Unauthenticated Cross Site Scripting (XSS) in Page Visits Counter – Lite <= 1.2.3 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-10 发布INFO

Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions.

CVE-2026-81794

Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

Unauthenticated Broken Access Control in Salon booking system <= 10.31.5 versions.

CVE-2026-81793

Unauthenticated Broken Access Control in Salon booking system <= 10.31.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

Subscriber Cross Site Scripting (XSS) in EventON <= 2.5.7 versions.

CVE-2026-81791

Subscriber Cross Site Scripting (XSS) in EventON <= 2.5.7 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-09-10 发布INFO

Unauthenticated Arbitrary File Deletion in Advanced Product Fields Extended for WooCommerce <= 3.1.6 versions.

CVE-2026-81789

Unauthenticated Arbitrary File Deletion in Advanced Product Fields Extended for WooCommerce <= 3.1.6 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-22

漏洞预警2026-09-10 发布INFO

Subscriber Broken Access Control in IMPress for IDX Broker <= 3.3.0 versions.

CVE-2026-81788

Subscriber Broken Access Control in IMPress for IDX Broker <= 3.3.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862

漏洞预警2026-09-10 发布INFO

Unauthenticated Broken Authentication in IMPress for IDX Broker <= 3.3.0 versions.

CVE-2026-81787

Unauthenticated Broken Authentication in IMPress for IDX Broker <= 3.3.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-288

漏洞预警2026-09-10 发布INFO

Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce <= 1.2.2 versions.

CVE-2026-81786

Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce <= 1.2.2 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-862