今日共收录 942 条安全情报，包含 169 个 CVE，438 篇安全通告，以及 68 篇研究论文。
← 返回归档列表CVE-2026-92435
The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user holds the required
CVE-2026-92430
The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7 does not verify the aut
CVE-2026-92425
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.4 does not perform object-leve
CVE-2026-92421
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.3 does not verify that the hos
CVE-2026-92420
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.2 does not verify that a booki
CVE-2026-92404
The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its REST API endpoints, allowi
CVE-2026-92403
The Secure Custom Fields WordPress plugin before 6.9.4 does not properly verify that a front-end form submission corresp
CVE-2026-92099
The WPGraphQL Smart Cache WordPress plugin before 2.3.2 does not require authorisation or validate a caller-supplied que
CVE-2026-91847
The Online Scheduling and Appointment Booking System WordPress plugin before 28.2 does not verify that the requester ow
CVE-2026-88926
The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of it
CVE-2026-88824
The Master Blocks WordPress plugin before 1.5.0 does not have authorisation on one of its REST routes, allowing unauthe
CVE-2026-86814
The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an e
CVE-2026-85680
The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user supplied profile names bef
CVE-2026-85574
The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the conf
CVE-2026-84750
The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uplo
CVE-2026-76790
The Estatik Real Estate Plugin WordPress plugin before 4.3.5 does not sanitise and escape several values decoded from a
CVE-2026-76554
The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to
CVE-2026-19860
The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.3 does not sufficiently restrict which PH
CVE-2026-16557
The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check when returning page-build
CVE-2025-15698
The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its settings, which could