今日共收录 1168 条安全情报，包含 403 个 CVE，452 篇安全通告，以及 67 篇研究论文。
← 返回归档列表CVE-2026-84252
The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updatin
CVE-2026-84251
The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when upd
CVE-2026-108540
A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of
CVE-2026-104028
The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-t
CVE-2026-81797
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.
CVE-2026-78535
Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.
CVE-2026-78533
Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.
CVE-2026-78531
Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions.
CVE-2026-78529
Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.
CVE-2026-66569
Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.
CVE-2026-66568
Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.
CVE-2026-66567
Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.
CVE-2026-66565
Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.
CVE-2026-66564
Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.
CVE-2026-66563
Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.
CVE-2026-66483
Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.
CVE-2026-66482
Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
CVE-2026-62129
Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
CVE-2026-62125
Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.
CVE-2026-62124
Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.