今日共收录 1784 条安全情报，包含 814 个 CVE，581 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-17586
The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'vkExUnit_cta_img
CVE-2026-16777
The Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers plugin for WordPress is vulnerable to
CVE-2026-15275
The WP Multi Store Locator Pro plugin for WordPress is vulnerable to generic SQL Injection via the 'store_locatore_searc
CVE-2026-15004
The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Sc
CVE-2026-14472
The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via kubio/copyright Block Co
CVE-2026-14323
The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in
CVE-2026-13471
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direc
CVE-2026-12954
The Mapster WP Maps plugin for WordPress is vulnerable to Arbitrary User Meta Write in all versions up to, and including
CVE-2026-12739
The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypas
CVE-2026-12384
Authorization bypass through User-Controlled key vulnerability in TECHIN2B TECHIN2B Application allows Privilege Abuse.
CVE-2026-11757
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in KA Informatics Tec
CVE-2026-92714
The Download Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and inclu
CVE-2026-92619
The Booking Calendar plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 11
CVE-2026-92561
The Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'options' parameter in
CVE-2026-91707
The The Divi theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.
CVE-2026-90977
The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session value is e
CVE-2026-90976
The Clean Login WordPress plugin before 1.19 does not check whether user registration is enabled before creating an acco
CVE-2026-89413
The Filter Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.
CVE-2026-89330
The EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents plugin for
CVE-2026-89278
The GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI plugin for WordPress is v