Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.
CVE-2026-42699
Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.
2026-10-11 归档
今日共收录 1127 条安全情报，包含 372 个 CVE，412 篇安全通告，以及 88 篇研究论文。
← 返回归档列表Unauthenticated Cross Site Scripting (XSS) in Social Share Icons & Social Share Buttons <= 3.7.5 versions.
CVE-2026-42697
Unauthenticated Cross Site Scripting (XSS) in Social Share Icons & Social Share Buttons <= 3.7.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions.
CVE-2026-42693
Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions.
Subscriber SQL Injection in Events Manager <= 7.4.6 versions.
CVE-2026-42633
Subscriber SQL Injection in Events Manager <= 7.4.6 versions.
Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.
CVE-2026-42632
Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.
CVE-2026-42631
Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.
Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions.
CVE-2026-42630
Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions.
Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.
CVE-2026-42419
Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.
Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.
CVE-2026-40808
Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.
Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions.
CVE-2026-40805
Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions.
Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions.
CVE-2026-40803
Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions.
Subscriber Settings Change in Pubjet | پابجت <= 5.4.8 versions.
CVE-2026-40802
Subscriber Settings Change in Pubjet | پابجت <= 5.4.8 versions.
Subscriber Broken Access Control in Wordable <= 8.2.10 versions.
CVE-2026-40801
Subscriber Broken Access Control in Wordable <= 8.2.10 versions.
Subscriber Broken Access Control in WPSection <= 1.5.1 versions.
CVE-2026-40777
Subscriber Broken Access Control in WPSection <= 1.5.1 versions.
Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.
CVE-2026-39802
Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.
Unauthenticated Cross Site Scripting (XSS) in Additional Order Filters for WooCommerce <= 1.24 versions.
CVE-2026-39800
Unauthenticated Cross Site Scripting (XSS) in Additional Order Filters for WooCommerce <= 1.24 versions.
Unauthenticated Cross Site Scripting (XSS) in WP File Download <= 6.3.6 versions.
CVE-2026-39799
Unauthenticated Cross Site Scripting (XSS) in WP File Download <= 6.3.6 versions.
Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This issue affects Builderius: from 1.4 through 1.4-beta.
CVE-2026-27350
Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This i
Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass...
CVE-2026-108604
Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows
slide-maker through 5.8.0 contains a path traversal vulnerability in generate_images_openai.py that allows attackers to write image files outside the output directory via manife...
CVE-2026-108603
slide-maker through 5.8.0 contains a path traversal vulnerability in generate_images_openai.py that allows attackers to