今日共收录 1399 条安全情报，包含 504 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-92412
The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before ou
CVE-2026-90974
The WP Fusion Lite WordPress plugin before 3.48.0 does not require authentication on a settings handler that runs durin
CVE-2026-90972
The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers
CVE-2026-89296
The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a S
CVE-2026-88999
The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5
CVE-2026-87973
The If-So Dynamic Content WordPress plugin before 1.10.2 does not sanitize a conversion name before storing it, nor esc
CVE-2026-87970
The If-So Dynamic Content WordPress plugin before 1.10.2 does not escape a request-supplied value before reflecting it
CVE-2026-86610
The Download Manager WordPress plugin before 3.3.71 does not sufficiently sanitise and escape a package setting before o
CVE-2026-85679
The Extendify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'styles.blocks' Block Type Key in al
CVE-2026-67075
HCL Digital Experience is affected by improper input sanitation. This can result in HTML injection which could be lever
CVE-2026-19253
The Cache Enabler WordPress plugin before 1.8.17 does not validate a URL before using it to build a filesystem path in i
CVE-2026-103543
A vulnerability has been found in itsourcecode Leave Management System 1.0. The affected element is an unknown function
CVE-2026-103542
A flaw has been found in formtools.org Form Tools up to 3.1.1. Impacted is the function smart_fill of the file /global/c
CVE-2026-103541
A vulnerability was detected in formtools.org Form Tools up to 3.1.1. This issue affects the function Files::uploadFile
CVE-2026-103540
A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1. This vulnerability affects the funct
CVE-2026-101147
The Featured Image from URL (FIFU) WordPress plugin before 6.0.8, Featured Image from URL (FIFU) Premium WordPress plugi
CVE-2026-92548
The WP Popular Posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inc
CVE-2026-82828
Hitachi Coding Software Suite contains an Incorrect Authorization vulnerability that allows an unprivileged user to perf
CVE-2026-82826
Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information wh
CVE-2026-78210
In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts in an