The Optima Express IDX WordPress plugin before 8.7.6 does not perform any authorisation check on one of its AJAX actions that is available to logged-out users, allowing unauthen...

CVE-2026-96897

The Optima Express IDX WordPress plugin before 8.7.6 does not perform any authorisation check on one of its AJAX actions

历史摘要 · 未重新核验 · NVD

The Malcure Malware Shield — Removal, Repair, Monitor WordPress plugin before 19.9.7 does not perform an authorisation check on one of its AJAX actions, allowing users with a su...

CVE-2026-96896

The Malcure Malware Shield — Removal, Repair, Monitor WordPress plugin before 19.9.7 does not perform an authorisation c

历史摘要 · 未重新核验 · NVD

The WP YouTube Lyte WordPress plugin before 1.7.31 does not escape some attributes of YouTube embed blocks before outputting them in an HTML attribute when rendering the block, ...

CVE-2026-96895

The WP YouTube Lyte WordPress plugin before 1.7.31 does not escape some attributes of YouTube embed blocks before output

历史摘要 · 未重新核验 · NVD

The Verge3D Publishing and E-Commerce WordPress plugin through 4.13.0 does not restrict access to a file-download handler, allowing unauthenticated users to download the digital...

CVE-2026-92995

The Verge3D Publishing and E-Commerce WordPress plugin through 4.13.0 does not restrict access to a file-download handle

历史摘要 · 未重新核验 · NVD

The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication or verify ownership before loading a saved cart from a request-supplied identifier that...

CVE-2026-92436

The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication or verify ownership before loa

历史摘要 · 未重新核验 · NVD

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not sanitize imported feed content before storing it as post content, allowing users with the Contributor role...

CVE-2026-89006

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not sanitize imported feed content before storing it

历史摘要 · 未重新核验 · NVD

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check before fetching a user-supplied URL and rendering the response, allowing users ...

CVE-2026-89003

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check before fetching a user

历史摘要 · 未重新核验 · NVD

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is permitted to publish content or to attribute posts to anothe...

CVE-2026-89001

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is per

历史摘要 · 未重新核验 · NVD

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check or validate the destination of a user-supplied feed URL before fetching it serv...

CVE-2026-89000

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check or validate the destin

历史摘要 · 未重新核验 · NVD

The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not prevent deserialization of untrusted input and does not correctly restrict a privileg...

CVE-2026-86841

The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not prevent deserialization of u

历史摘要 · 未重新核验 · NVD

The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not verify that appointment and payment records requested through its staff-role AJAX act...

CVE-2026-86839

The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not verify that appointment and

历史摘要 · 未重新核验 · NVD

The Download Manager WordPress plugin before 7.5.6 does not sanitise and escape data submitted through its email-locked download subscription form before outputting it back in a...

CVE-2026-86609

The Download Manager WordPress plugin before 7.5.6 does not sanitise and escape data submitted through its email-locked

历史摘要 · 未重新核验 · NVD

The EmbedPress WordPress plugin before 4.6.7 does not escape one of its block attributes before outputting it inside an HTML attribute, which could allow users with the contrib...

CVE-2026-85002

The EmbedPress WordPress plugin before 4.6.7 does not escape one of its block attributes before outputting it inside an

历史摘要 · 未重新核验 · NVD

The WebFacing™ WordPress plugin before 5.4 does not restrict access to one of its bundled scripts and does not validate a user-supplied path before using it to include a local ...

CVE-2026-84069

The WebFacing™ WordPress plugin before 5.4 does not restrict access to one of its bundled scripts and does not validate

历史摘要 · 未重新核验 · NVD

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.8, UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 2.26.8.26 does not have any capab...

CVE-2026-82841

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.8, UpdraftPlus: WP Backup & Migration Plugin

历史摘要 · 未重新核验 · NVD

The Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its settings pages, making it reachable by every logged in user under a configuratio...

CVE-2026-81655

The Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its settings pages, making

历史摘要 · 未重新核验 · NVD

In MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) explicitly rejects the combination track_meta=True with weights_only=True, forcing users who cache MetaTensors (the def...

CVE-2026-100841

In MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) explicitly rejects the combination track_meta=True with weight

历史摘要 · 未重新核验 · NVD

决赛直播｜第四届阿里CTF安全挑战赛

本条信息为阿里云先知社区发布的活动预告/直播通知，主题是“第四届阿里CTF安全挑战赛”的决赛直播。从标题、标签（xianzhi、community、research）与来源性质判断，这是一条安全竞赛（Capture The Flag）相关的

历史摘要 · 未重新核验 · 先知社区

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

本条内容并非威胁情报或安全事件披露，而是阿里云旗下先知社区（xz.aliyun.com）发布的一则招聘通告，标题为《抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！》，发布时间为 2026-09-28。原文正文摘录为空，仅提供

历史摘要 · 未重新核验 · 先知社区

【AI自动逆向算法】Binary Analysis Agent：构建AI驱动的二进制分析系统

【AI自动逆向算法】Binary Analysis Agent：构建AI驱动的二进制分析系统

历史摘要 · 未重新核验 · 看雪