Unauthenticated Local File Inclusion in Cardea <= 2.3 versions.
CVE-2026-62065
Unauthenticated Local File Inclusion in Cardea <= 2.3 versions.
2026-10-12 归档
今日共收录 1168 条安全情报，包含 403 个 CVE，452 篇安全通告，以及 67 篇研究论文。
← 返回归档列表Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions.
CVE-2026-62064
Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions.
Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.
CVE-2026-62043
Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.
Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.
CVE-2026-62038
Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.
CVE-2026-62037
Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.
Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.
CVE-2026-62035
Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions.
CVE-2026-62034
Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions
Subscriber Settings Change in uListing <= 2.2.0 versions.
CVE-2026-62033
Subscriber Settings Change in uListing <= 2.2.0 versions.
Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.
CVE-2026-62030
Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions.
CVE-2026-62027
Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions.
Subscriber PHP Object Injection in Angio <= 1.1.1 versions.
CVE-2026-62021
Subscriber PHP Object Injection in Angio <= 1.1.1 versions.
Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.
CVE-2026-62020
Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected XSS. This issue affects Kids P...
CVE-2026-57742
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kid
Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.
CVE-2026-48194
Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.
Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.
CVE-2026-48193
Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.
Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.
CVE-2026-45440
Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.
Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.
CVE-2026-42777
Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.
Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.
CVE-2026-42724
Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.
Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.
CVE-2026-42722
Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.
Administrator SQL Injection in Leyka <= 3.32.3 versions.
CVE-2026-42717
Administrator SQL Injection in Leyka <= 3.32.3 versions.