The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross...
CVE-2026-92243
The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the
2026-10-03 归档
今日共收录 1361 条安全情报，包含 499 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress...
CVE-2026-100180
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vul
The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is...
CVE-2026-94378
The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to Stored C
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &...
CVE-2026-96270
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi
The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is...
CVE-2026-95865
The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injectio
OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow.
CVE-2026-79113
OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow.
ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in...
CVE-2026-105083
ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips
UVdesk support-center-bundle before 1.1.3.3 contains an insecure direct object reference...
CVE-2026-105029
UVdesk support-center-bundle before 1.1.3.3 contains an insecure direct object reference vulnerability in the rateTicket
Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and...
CVE-2026-104477
Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and image subparsers, which fa
Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows...
CVE-2026-105030
Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retri
Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows...
CVE-2026-104478
Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users
Shopclass before 6.2.0 contains a stored cross-site scripting vulnerability that allows self...
CVE-2026-104479
Shopclass before 6.2.0 contains a stored cross-site scripting vulnerability that allows self-registered non-admin users
Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the...
CVE-2026-104433
Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of includ
Backdrop CMS before 1.35.1 contains an information disclosure vulnerability that allows...
CVE-2026-104476
Backdrop CMS before 1.35.1 contains an information disclosure vulnerability that allows unauthenticated attackers to ret
OpenLiteSpeed before 1.9.3 contains a local privilege escalation vulnerability in admin/misc/lsup...
CVE-2026-104474
OpenLiteSpeed before 1.9.3 contains a local privilege escalation vulnerability in admin/misc/lsup.sh that runs unverifie
Armatura One stores database and message-broker credentials in an install configuration file,...
CVE-2026-94591
Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-1
The WebSocket Application Programming Interface lacks restrictions on the number of...
CVE-2026-97363
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absenc
Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID...
CVE-2026-105051
Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys
MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are...
CVE-2026-105043
MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simuli
The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private...
CVE-2026-105048
The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses).