2026-10-10 归档

今日共收录 1383 条安全情报,包含 534 个 CVE,469 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
漏洞预警2026-10-09 发布INFO

Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.

CVE-2026-96333

Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yalla ya! Simple Payment simple-payment allows Reflected XSS.This issue aff...

CVE-2026-96332

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yalla ya! Simple P

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.Thi...

CVE-2026-96329

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue af...

CVE-2026-95610

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolut

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored...

CVE-2026-95609

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Medi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This is...

CVE-2026-95608

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS...

CVE-2026-95607

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue a...

CVE-2026-95599

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue ...

CVE-2026-95598

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Search

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ...

CVE-2026-95597

Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Conf

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuild...

CVE-2026-95596

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Sho

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Reflected ...

CVE-2026-95591

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBookin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorr...

CVE-2026-95589

Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-pa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected X...

CVE-2026-94668

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Sal

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetReviews jet-reviews allows Stored XSS.This issue affects JetR...

CVE-2026-94667

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetRevi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 al...

CVE-2026-94666

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ZealousWeb Generate PDF

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This...

CVE-2026-94665

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Cla

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Path Traversal.T...

CVE-2026-94664

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org PDF for Cont

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allo...

CVE-2026-94663

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileG

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog...

CVE-2026-94661

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog

历史摘要 · 未重新核验 · NVD