Unauthenticated Cross Site Request Forgery (CSRF) in Site Kit by Google <= 1.186.0 versions.
CVE-2026-62139
Unauthenticated Cross Site Request Forgery (CSRF) in Site Kit by Google <= 1.186.0 versions.
2026-09-12 归档
今日共收录 1637 条安全情报，包含 801 个 CVE，449 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.1 versions.
CVE-2026-62138
Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.1 versions.
Unauthenticated Sensitive Data Exposure in bbPress <= 2.6.14 versions.
CVE-2026-62137
Unauthenticated Sensitive Data Exposure in bbPress <= 2.6.14 versions.
Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce <= 2.3.21 versions.
CVE-2026-62136
Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce <= 2.3.21 vers
Unauthenticated Broken Access Control in Booktics <= 1.0.24 versions.
CVE-2026-62135
Unauthenticated Broken Access Control in Booktics <= 1.0.24 versions.
Contributor Insecure Direct Object References (IDOR) in Starter Templates <= 4.7.5 versions.
CVE-2026-62134
Contributor Insecure Direct Object References (IDOR) in Starter Templates <= 4.7.5 versions.
Subscriber Cross Site Request Forgery (CSRF) in RTMKit <= 2.1.5 versions.
CVE-2026-62133
Subscriber Cross Site Request Forgery (CSRF) in RTMKit <= 2.1.5 versions.
Subscriber Broken Access Control in Masteriyo - LMS <= 3.4.0 versions.
CVE-2026-62132
Subscriber Broken Access Control in Masteriyo - LMS <= 3.4.0 versions.
Unauthenticated Broken Access Control in Passster <= 4.3.13 versions.
CVE-2026-62114
Unauthenticated Broken Access Control in Passster <= 4.3.13 versions.
Contributor Insecure Direct Object References (IDOR) in Slim SEO <= 4.10.0 versions.
CVE-2026-62113
Contributor Insecure Direct Object References (IDOR) in Slim SEO <= 4.10.0 versions.
Editor SQL Injection in Amelia <= 2.4.9 versions.
CVE-2026-62112
Editor SQL Injection in Amelia <= 2.4.9 versions.
Contributor Cross Site Scripting (XSS) in Simple Payment <= 2.5.4 versions.
CVE-2026-62111
Contributor Cross Site Scripting (XSS) in Simple Payment <= 2.5.4 versions.
Contributor Cross Site Scripting (XSS) in Bold Page Builder <= 5.9.9 versions.
CVE-2026-62110
Contributor Cross Site Scripting (XSS) in Bold Page Builder <= 5.9.9 versions.
Editor SQL Injection in Sky Addons for Elementor <= 3.8.4 versions.
CVE-2026-62109
Editor SQL Injection in Sky Addons for Elementor <= 3.8.4 versions.
Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions.
CVE-2026-62107
Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions.
Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions.
CVE-2026-62106
Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions.
Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions.
CVE-2026-62102
Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions.
Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2.
CVE-2026-62089
Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affect
Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive Data. This issue affects ElasticPress: from n/a through ...
CVE-2026-62088
Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive
Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce <= 3.1.0 versions.
CVE-2026-27378
Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce <= 3.1.0 versions.