The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all...
CVE-2026-6295
The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to and inc
2026-09-20 归档
今日共收录 942 条安全情报，包含 169 个 CVE，438 篇安全通告，以及 68 篇研究论文。
← 返回归档列表The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to...
CVE-2026-2278
The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by'...
CVE-2026-13191
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter in all versions up t
The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is...
CVE-2026-15664
The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI...
CVE-2026-15946
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress
The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via...
CVE-2026-11608
The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpcr3_fname' param
The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-12402
The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fb-config' S
The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting...
CVE-2026-92435
The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user holds the required
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.3 does...
CVE-2026-92421
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.3 does not verify that the hos
The Online Scheduling and Appointment Booking System WordPress plugin before 28.2 does not...
CVE-2026-91847
The Online Scheduling and Appointment Booking System WordPress plugin before 28.2 does not verify that the requester ow
The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7...
CVE-2026-92430
The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7 does not verify the aut
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter...
CVE-2026-13200
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to,
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.4 does...
CVE-2026-92425
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.4 does not perform object-leve
The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has...
CVE-2026-86814
The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an e
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.2 does...
CVE-2026-92420
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.2 does not verify that a booki
The Secure Custom Fields WordPress plugin before 6.9.4 does not properly verify that a front-end...
CVE-2026-92403
The Secure Custom Fields WordPress plugin before 6.9.4 does not properly verify that a front-end form submission corresp
The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not...
CVE-2026-88926
The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of it
The Real3D Flipbook Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-15098
The Real3D Flipbook Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lightboxtext' shortc
The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its...
CVE-2026-92404
The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its REST API endpoints, allowi
The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is...
CVE-2026-11899
The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to authorizat