The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered...
CVE-2026-86827
The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered backup execution handle
2026-10-08 归档
今日共收录 832 条安全情报，包含 0 个 CVE，435 篇安全通告，以及 100 篇研究论文。
← 返回归档列表The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the user...
CVE-2026-94245
The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the user submitting a wallet trans
The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working...
CVE-2026-86826
The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses durin
The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend...
CVE-2026-105197
The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend staff user is authorized to
The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an...
CVE-2026-94275
The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an order before returning i
The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet...
CVE-2026-94246
The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet account named in a with
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin...
CVE-2026-5769
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintex
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API...
CVE-2026-5048
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability
The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of...
CVE-2026-86828
The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a
The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability...
CVE-2026-94244
The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a
The Booking Calendar WordPress plugin before 11.8 does not generate its per-booking access hashes...
CVE-2026-105193
The Booking Calendar WordPress plugin before 11.8 does not generate its per-booking access hashes with sufficient entrop
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify...
CVE-2026-104645
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on severa
An OS command injection vulnerability exists in the REST API management interface of Brocade...
CVE-2026-94581
An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session...
CVE-2026-94579
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines durin
The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce...
CVE-2026-103692
The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions availa
Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache...
CVE-2026-87661
Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data dur
A command injection vulnerability exists in the WebTools administrative interface handling...
CVE-2026-94586
A command injection vulnerability exists in the WebTools administrative interface handling configuration download or fil
A buffer overflow vulnerability exists in the WebTools administrative interface handling...
CVE-2026-94587
A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file
An authentication bypass and command injection vulnerability exists in the inter-switch remote...
CVE-2026-87663
An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Broc
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several...
CVE-2026-104646
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration