The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before...
CVE-2026-92965
The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before acting on a sign-in code sup
2026-09-21 归档
今日共收录 815 条安全情报，包含 111 个 CVE，394 篇安全通告，以及 53 篇研究论文。
← 返回归档列表A vulnerability was found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this issue is the function...
CVE-2026-93967
A vulnerability was found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this issue is the function generate_host_task of th
SmartLife app dynamically generates brand‑new SmartLife application authentication parameters...
CVE-2026-86554
SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process
A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of...
CVE-2026-93971
A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevo
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The...
CVE-2026-93973
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown
The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the...
CVE-2026-92541
The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the promote_users capability in
A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of...
CVE-2026-93968
A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/
The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it...
CVE-2026-87068
The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it enforces elsewhere when a r
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not check that a...
CVE-2026-81654
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not check that a user holds its options ca
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the...
CVE-2026-81651
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user saving a gallery
The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value...
CVE-2026-92422
The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value before concatenating it
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the...
CVE-2026-81653
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user acting on an imag
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly...
CVE-2026-81650
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of f
The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user...
CVE-2026-16542
The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before req
The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be...
CVE-2026-87067
The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be instantiated when it deser
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the...
CVE-2026-81652
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the requesting user is ent
The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them...
CVE-2026-84223
The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them uploadable site-wide, al
The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that...
CVE-2026-92410
The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up del
The Tripzzy WordPress plugin before 1.5.1 does not perform any capability or ownership checks on...
CVE-2026-87840
The Tripzzy WordPress plugin before 1.5.1 does not perform any capability or ownership checks on its administrative boo
The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its...
CVE-2026-14844
The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before