今日共收录 1168 条安全情报，包含 403 个 CVE，452 篇安全通告，以及 67 篇研究论文。
← 返回归档列表CVE-2026-88827
The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication pa
CVE-2026-88826
The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores
CVE-2026-88785
The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext pa
CVE-2026-87764
The BuddyPress Instant Chat WordPress plugin through 1.6 does not check that the sender of a chat message belongs to the
CVE-2026-87762
The Adwised Web Push Notification WordPress plugin through 2.5.7 does not have authorisation checks on several state-cha
CVE-2026-87761
The Adwised Web Push Notification WordPress plugin through 2.5.7 does not perform any capability or nonce check before a
CVE-2026-87760
The Web Vitals Tracking WordPress plugin through 5.4.2 does not validate or escape performance measurements submitted by
CVE-2026-86798
The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, an
CVE-2026-85126
The Crowdfundly WordPress plugin through 2.2.2 does not have capability checks on some of its AJAX actions, allowing use
CVE-2026-84261
The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and escape content submitted th
CVE-2026-84260
The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted thr
CVE-2026-84259
The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through a
CVE-2026-84258
The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted throu
CVE-2026-81420
The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement
CVE-2026-81156
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputt
CVE-2026-81155
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a
CVE-2026-81154
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one
CVE-2026-81153
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputtin
CVE-2026-14854
The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate
CVE-2026-12980
The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets bef