Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions.
CVE-2026-94487
Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions.
2026-09-24 归档
今日共收录 1600 条安全情报，包含 683 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Contributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions.
CVE-2026-94461
Contributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions.
Unauthenticated Bypass Vulnerability in Captcha Code <= 3.32 versions.
CVE-2026-94457
Unauthenticated Bypass Vulnerability in Captcha Code <= 3.32 versions.
Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions.
CVE-2026-94391
Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions.
An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a <select> element that triggers requestFullscreen without...
CVE-2026-94181
An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a
Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button <= 2.4.9 versions.
CVE-2026-94179
Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button <= 2.4.9 versions.
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions.
CVE-2026-94176
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions.
Administrator SQL Injection in Email Log <= 2.63 versions.
CVE-2026-94174
Administrator SQL Injection in Email Log <= 2.63 versions.
Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions.
CVE-2026-94168
Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions.
Contributor SQL Injection in WP EasyCart <= 5.9.4 versions.
CVE-2026-94124
Contributor SQL Injection in WP EasyCart <= 5.9.4 versions.
Contributor Cross Site Scripting (XSS) in Premium Blocks – Gutenberg Blocks for WordPress <= 2.3.17 versions.
CVE-2026-94118
Contributor Cross Site Scripting (XSS) in Premium Blocks – Gutenberg Blocks for WordPress <= 2.3.17 versions.
Unauthenticated Broken Access Control in MarketKing <= 2.1.70 versions.
CVE-2026-94080
Unauthenticated Broken Access Control in MarketKing <= 2.1.70 versions.
Unauthenticated Broken Access Control in WP User Manager <= 2.9.19 versions.
CVE-2026-94079
Unauthenticated Broken Access Control in WP User Manager <= 2.9.19 versions.
Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions.
CVE-2026-93774
Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions.
Contributor SQL Injection in Mollie Forms <= 2.11.0 versions.
CVE-2026-93773
Contributor SQL Injection in Mollie Forms <= 2.11.0 versions.
Subscriber Cross Site Scripting (XSS) in wpForo Forum <= 3.1.5 versions.
CVE-2026-93772
Subscriber Cross Site Scripting (XSS) in wpForo Forum <= 3.1.5 versions.
Unauthenticated Insecure Direct Object References (IDOR) in AI Engine <= 3.7.8 versions.
CVE-2026-93623
Unauthenticated Insecure Direct Object References (IDOR) in AI Engine <= 3.7.8 versions.
Unauthenticated Cross Site Scripting (XSS) in WPS Limit Login <= 1.5.9.3 versions.
CVE-2026-93622
Unauthenticated Cross Site Scripting (XSS) in WPS Limit Login <= 1.5.9.3 versions.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetTricks allows Stored XSS. This issue affects ...
CVE-2026-93618
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimp
Contributor Broken Access Control in WSP MCP – AI Agents Connector <= 2.7.0 versions.
CVE-2026-93529
Contributor Broken Access Control in WSP MCP – AI Agents Connector <= 2.7.0 versions.