今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。
← 返回归档列表CVE-2026-114129
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. From
CVE-2026-114125
Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19,
CVE-2026-114121
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version
CVE-2026-113813
The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not perform any capability or ownership check
CVE-2026-113797
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version
CVE-2026-113494
The GeoDirectory WordPress plugin before 2.8.195 does not perform any status or ownership check when rendering a listin
CVE-2026-113488
The GeoDirectory WordPress plugin before 2.8.196 does not properly escape a post badge shortcode attribute for a JavaSc
CVE-2026-113487
The GeoDirectory WordPress plugin before 2.8.196 does not properly sanitise or escape a post badge click-through link v
CVE-2026-113486
The Media Library Assistant WordPress plugin before 3.42 does not verify a CSRF nonce on its Empty Trash media action, s
CVE-2026-113485
The Media Library Assistant WordPress plugin before 3.42 does not consistently validate its CSRF nonce on the Media Libr
CVE-2026-111967
The MP3 Audio Player WordPress plugin before 5.16 does not escape one of its audio player shortcode attributes before o
CVE-2026-111961
The Royal MCP WordPress plugin before 1.5.10 does not perform an object-level permission check before duplicating a req
CVE-2026-111960
The Royal MCP WordPress plugin before 1.5.10 does not perform object-level or post-type authorisation checks in one of
CVE-2026-111577
The GoSMTP WordPress plugin before 1.2.5 does not perform a settings-management authorization check on its SMTP configu
CVE-2026-111032
The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly verify authorization against the targeted produc
CVE-2026-111031
The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before using it in a redirec
CVE-2026-111027
The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly sanitise and escape a parameter before using it
CVE-2026-111021
The افزونه پیامک ووکامرس | Persian WooCommerce SMS WordPress plugin before 7.3.2 does not sanitise and escape a paramete
CVE-2026-110691
The WPOrLogin WordPress plugin before 3.1.0 does not perform a capability check or validate a nonce before updating its
CVE-2026-110524
The Copy Anything to Clipboard for WordPress WordPress plugin before 5.5.5 does not sanitize and escape a shortcode att