The Loco Translate WordPress plugin before 2.8.9 does not sanitise and escape some bundle...
CVE-2026-94239
The Loco Translate WordPress plugin before 2.8.9 does not sanitise and escape some bundle configuration values before ou
2026-10-04 归档
今日共收录 931 条安全情报，包含 128 个 CVE，457 篇安全通告，以及 95 篇研究论文。
← 返回归档列表The WP Ultimate CSV Importer WordPress plugin before 9.2 does not use a site-specific secret...
CVE-2026-80518
The WP Ultimate CSV Importer WordPress plugin before 9.2 does not use a site-specific secret when deriving the storage
The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure...
CVE-2026-11399
The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Referenc
The Transliterator – Multilingual and Multi-script Text Conversion plugin for WordPress is...
CVE-2026-96575
The Transliterator – Multilingual and Multi-script Text Conversion plugin for WordPress is vulnerable to Stored Cross-Si
The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise file paths...
CVE-2026-85015
The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise file paths inside uploaded archive
The Loco Translate WordPress plugin before 2.8.9 does not restrict which file paths its...
CVE-2026-94238
The Loco Translate WordPress plugin before 2.8.9 does not restrict which file paths its translation file routes will rea
The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored...
CVE-2026-97344
The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Av
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code...
CVE-2026-96962
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unaut
The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication, a...
CVE-2026-92437
The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication, a nonce or an ownership check
The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise and escape...
CVE-2026-92923
The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise and escape a parameter before usin
The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters...
CVE-2026-89236
The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the
The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not correctly handle a...
CVE-2026-85568
The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not correctly handle a search value before rewr
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it...
CVE-2026-86834
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root o
The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More...
CVE-2026-103909
The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress i
The Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin for...
CVE-2026-91108
The Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin for WordPress is vulnerable to
The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and...
CVE-2026-97337
The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and sensitive information
The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-87091
The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Par
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to form submission...
CVE-2026-86832
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to form submission data, allowing unauthent
The WP Ultimate CSV Importer WordPress plugin before 9.2 does not properly validate the file...
CVE-2026-80517
The WP Ultimate CSV Importer WordPress plugin before 9.2 does not properly validate the file types contained in an uplo
The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based...
CVE-2026-97341
The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via