The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...
CVE-2026-96650
The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'platform_user_photo' Cust
2026-10-04 归档
今日共收录 931 条安全情报，包含 128 个 CVE，457 篇安全通告，以及 95 篇研究论文。
← 返回归档列表The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-96564
The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Author
The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title...
CVE-2026-93430
The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title' and 'url' Render Args
The GeoDirectory plugin for WordPress is vulnerable to SQL Injection via the stored latitude...
CVE-2026-103913
The GeoDirectory plugin for WordPress is vulnerable to SQL Injection via the stored latitude/longitude coordinates of a
The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-100148
The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reviews[
The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is...
CVE-2026-100149
The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive
The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Reflected Cross...
CVE-2026-103888
The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'w
The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when...
CVE-2026-103293
The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a
The WP 2FA WordPress plugin before 4.1.0 does not invalidate a time-based one-time passcode once...
CVE-2026-103514
The WP 2FA WordPress plugin before 4.1.0 does not invalidate a time-based one-time passcode once it has been used, allo
The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape...
CVE-2026-101159
The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape reviews submitted through its
The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-101928
The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author'
The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from...
CVE-2026-101161
The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review
The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-101357
The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'se
The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview...
CVE-2026-101162
The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings before outputt
The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2025-12828
The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out w
The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review...
CVE-2026-101160
The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before
The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Arbitrary Content...
CVE-2026-101923
The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Arbitrary Content Deletion in versions up to, an
probe-image-size: Quadratic-time Denial of Service in the SVG Parser
CVE-2026-104861
## Overview `probe-image-size` scans the SVG header with a searching regular expression, `/]*>/`. On input that contain
@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header
CVE-2026-19481
### Impact Versions of `@fastify/busboy` from 1.0.0 and prior to 3.2.1 are vulnerable to a Denial of Service. The multi
@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary
CVE-2026-19484
### Impact Versions of `@fastify/busboy` from 3.1.0 and prior to 3.2.1 are vulnerable to a Denial of Service. The vendo