The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive...
CVE-2026-9289
The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive Information Exposure in all versi
2026-09-20 归档
今日共收录 942 条安全情报，包含 169 个 CVE，438 篇安全通告，以及 68 篇研究论文。
← 返回归档列表The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &...
CVE-2026-85658
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePres
The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ...
CVE-2026-76579
The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'esi' parameter in all
The Empik for Woocommerce plugin for WordPress is vulnerable to authorization bypass in all...
CVE-2026-9766
The Empik for Woocommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includin
The YS LeadGen plugin for WordPress is vulnerable to authorization bypass and Stored Cross-Site...
CVE-2026-1256
The YS LeadGen plugin for WordPress is vulnerable to authorization bypass and Stored Cross-Site Scripting via multiple A
The Custom Field Template plugin for WordPress is vulnerable to generic SQL Injection via the ...
CVE-2026-9855
The Custom Field Template plugin for WordPress is vulnerable to generic SQL Injection via the 'post_ID' parameter in all
The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site...
CVE-2026-87917
The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'data' Dynam
The GoPay for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the ...
CVE-2026-75959
The GoPay for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'log_table_filter' paramet
The Partial Shipment for Woocommerce plugin for WordPress is vulnerable to Missing Authorization...
CVE-2026-9858
The Partial Shipment for Woocommerce plugin for WordPress is vulnerable to Missing Authorization in versions up to, and
The YS LeadGen plugin for WordPress is vulnerable to Sensitive Information Exposure in all...
CVE-2026-1255
The YS LeadGen plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including
The Flex Import plugin for WordPress is vulnerable to Missing Authorization in all versions up to...
CVE-2026-9615
The Flex Import plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.0. T
The Metasync plugin for WordPress is vulnerable to unauthorized modification of data due to a...
CVE-2026-15947
The Metasync plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o
The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to...
CVE-2026-15463
The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Reflected Cross-Site Scr
The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request...
CVE-2026-1641
The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions
The WP Composer – The Easiest Page Builder plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-2422
The WP Composer – The Easiest Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pb
The Ibtana – Ecommerce Product Addons plugin for WordPress is vulnerable to unauthorized post...
CVE-2026-1984
The Ibtana – Ecommerce Product Addons plugin for WordPress is vulnerable to unauthorized post meta modification due to a
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
CVE-2026-5400
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media field filter values
The Bread plugin for WordPress is vulnerable to information exposure in versions up to and...
CVE-2026-4792
The Bread plugin for WordPress is vulnerable to information exposure in versions up to and including 2.9.12. This is due
The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic...
CVE-2026-1242
The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callb
The The Welcomizer plugin for WordPress is vulnerable to Remote Code Execution in all versions up...
CVE-2026-4327
The The Welcomizer plugin for WordPress is vulnerable to Remote Code Execution in all versions up to and including 2.8.1