今日共收录 1361 条安全情报，包含 499 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-59670
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow
CVE-2026-59669
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow
CVE-2026-97663
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Autho
CVE-2026-97641
The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content i
CVE-2026-97634
The Event Tickets and Registration plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' paramet
CVE-2026-97342
The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via '
CVE-2026-97338
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Display Name in all versions
CVE-2026-97336
The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'file_list' Field Type in all versions up
CVE-2026-96871
The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all ve
CVE-2026-96647
The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cr
CVE-2026-96578
The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
CVE-2026-96567
The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_id' parameter in all vers
CVE-2026-96566
The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi
CVE-2026-95817
The DoFollow Case by Case plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all v
CVE-2026-95670
The No External Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Log URL via /goto/{base64} R
CVE-2026-94432
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to I
CVE-2026-93880
The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting
CVE-2026-93756
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cros
CVE-2026-63578
Allocation of resources without limits in password-based private-key decryption (PbeUtilities.GenerateCipherParameters)
CVE-2026-63577
Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree)