今日共收录 1168 条安全情报，包含 403 个 CVE，452 篇安全通告，以及 67 篇研究论文。
← 返回归档列表CVE-2026-108541
A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /
CVE-2026-107694
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.2.0 does not verify that t
CVE-2026-107507
The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowi
CVE-2026-106029
The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleti
CVE-2026-104684
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before re
CVE-2026-104682
The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feat
CVE-2026-104681
The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to
CVE-2026-104680
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves f
CVE-2026-103695
The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL stat
CVE-2026-103694
The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can u
CVE-2026-103305
The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, an
CVE-2026-78534
Unauthenticated Cross Site Scripting (XSS) in Educavo <= 3.4.2 versions.
CVE-2026-78532
Unauthenticated Cross Site Scripting (XSS) in LMS <= 8.3 versions.
CVE-2026-78530
Subscriber Arbitrary File Deletion in FoodBakery <= 4.6 versions.
CVE-2026-66566
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
CVE-2026-66481
Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
CVE-2026-66480
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Produc
CVE-2026-65459
Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.
CVE-2026-62130
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
CVE-2026-62118
Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.