Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.
CVE-2026-42715
Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.
2026-10-12 归档
今日共收录 1168 条安全情报，包含 403 个 CVE，452 篇安全通告，以及 67 篇研究论文。
← 返回归档列表Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.
CVE-2026-42712
Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions.
CVE-2026-42711
Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions.
Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions.
CVE-2026-42709
Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 ver
Unauthenticated Broken Access Control in DK <= 3.2.1 versions.
CVE-2026-42706
Unauthenticated Broken Access Control in DK <= 3.2.1 versions.
Unauthenticated Broken Access Control in Grand News <= 3.4 versions.
CVE-2026-42705
Unauthenticated Broken Access Control in Grand News <= 3.4 versions.
Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions.
CVE-2026-42704
Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions.
Unauthenticated Cross Site Scripting (XSS) in Tutor LMS <= 4.1.0 versions.
CVE-2026-42702
Unauthenticated Cross Site Scripting (XSS) in Tutor LMS <= 4.1.0 versions.
Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.
CVE-2026-42699
Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.
Unauthenticated Cross Site Scripting (XSS) in Social Share Icons & Social Share Buttons <= 3.7.5 versions.
CVE-2026-42697
Unauthenticated Cross Site Scripting (XSS) in Social Share Icons & Social Share Buttons <= 3.7.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions.
CVE-2026-42693
Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions.
Subscriber SQL Injection in Events Manager <= 7.4.6 versions.
CVE-2026-42633
Subscriber SQL Injection in Events Manager <= 7.4.6 versions.
Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.
CVE-2026-42632
Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.
CVE-2026-42631
Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.
Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions.
CVE-2026-42630
Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions.
Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.
CVE-2026-42419
Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.
Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.
CVE-2026-40808
Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.
Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions.
CVE-2026-40805
Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions.
Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions.
CVE-2026-40803
Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions.
Subscriber Settings Change in Pubjet | پابجت <= 5.4.8 versions.
CVE-2026-40802
Subscriber Settings Change in Pubjet | پابجت <= 5.4.8 versions.