Subscriber Broken Access Control in Wordable <= 8.2.10 versions.
CVE-2026-40801
Subscriber Broken Access Control in Wordable <= 8.2.10 versions.
2026-10-12 归档
今日共收录 1168 条安全情报，包含 403 个 CVE，452 篇安全通告，以及 67 篇研究论文。
← 返回归档列表Subscriber Broken Access Control in WPSection <= 1.5.1 versions.
CVE-2026-40777
Subscriber Broken Access Control in WPSection <= 1.5.1 versions.
Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.
CVE-2026-39802
Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.
Unauthenticated Cross Site Scripting (XSS) in Additional Order Filters for WooCommerce <= 1.24 versions.
CVE-2026-39800
Unauthenticated Cross Site Scripting (XSS) in Additional Order Filters for WooCommerce <= 1.24 versions.
Unauthenticated Cross Site Scripting (XSS) in WP File Download <= 6.3.6 versions.
CVE-2026-39799
Unauthenticated Cross Site Scripting (XSS) in WP File Download <= 6.3.6 versions.
Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This issue affects Builderius: from 1.4 through 1.4-beta.
CVE-2026-27350
Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This i
Subscriber Bypass Vulnerability in MicroPayments <= 3.2.9 versions.
CVE-2026-107434
Subscriber Bypass Vulnerability in MicroPayments <= 3.2.9 versions.
Missing Authorization vulnerability in VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce woo-alidropship allows Exploiting Incorrectly Configured Acce...
CVE-2026-103685
Missing Authorization vulnerability in VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce woo-
Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3.
CVE-2026-96341
Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue af
Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affec...
CVE-2026-94590
Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads al
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows R...
CVE-2026-57806
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in drfuri Martfury -
抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！
抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！
决赛直播｜第四届阿里CTF安全挑战赛
决赛直播｜第四届阿里CTF安全挑战赛
Control CenterManage your security and delivery services
Control CenterManage your security and delivery services
See all Cybersecurity
See all Cybersecurity
Our Infrastructure
Our Infrastructure
OpenClaw安全使用实践指南
OpenClaw安全使用实践指南
关于OpenClaw安全应用的风险提示
关于OpenClaw安全应用的风险提示
关于“独狼”团伙大规模传播恶意程序的风险提示
关于“独狼”团伙大规模传播恶意程序的风险提示
关于RCtea僵尸网络大范围传播的风险提示
关于RCtea僵尸网络大范围传播的风险提示