The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined...
CVE-2026-113673
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it
2026-10-25 归档
今日共收录 737 条安全情报，包含 0 个 CVE，411 篇安全通告，以及 64 篇研究论文。
← 返回归档列表The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings...
CVE-2026-113674
The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by logged-ou
The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a...
CVE-2026-87835
The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may set when re
The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password...
CVE-2026-113492
The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading lis
The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check...
CVE-2026-113490
The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check when rendering a listin
The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment...
CVE-2026-113489
The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing be
The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL...
CVE-2026-113491
The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local
The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map...
CVE-2026-113493
The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attributes befo
The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or...
CVE-2026-107887
The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the actio
The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check...
CVE-2026-107907
The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check when handling its front
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor...
CVE-2026-115807
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v
MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root...
CVE-2026-115929
MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root cer
The app/process-api-response-headers action accepts fake Craft API response headers from any...
CVE-2026-115935
The app/process-api-response-headers action accepts fake Craft API response headers from any authenticated control panel
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-108793
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Craft CMS allows any authenticated control panel user to submit an element-search condition whose...
CVE-2026-115938
Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is ev
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-110814
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never...
CVE-2026-115937
The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-108537
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the...
CVE-2026-115801
A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::
filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name
CVE-2026-112937
`ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/writer lock) remove their private `.filelock-*` link