Subscriber Broken Access Control in Booking and Rental Manager <= 2.8.2 versions.
CVE-2026-54850
Subscriber Broken Access Control in Booking and Rental Manager <= 2.8.2 versions.
2026-10-31 归档
今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GIFTiT – Free Gifts for WooCommerce ithemeland-free-gifts-for-w...
CVE-2026-52710
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GIFTiT ̵
Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions.
CVE-2026-39786
Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for Elementor - Lite header-footer-element...
CVE-2026-39739
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force U
Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.
CVE-2026-39734
Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.
Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions.
CVE-2026-27061
Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions.
An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a mali...
CVE-2026-14467
An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised
A vulnerability was determined in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This vulnerability affects the function move_uploaded_file o...
CVE-2026-119620
A vulnerability was determined in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. Thi
A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This affects the function mysqli_query of the file admin/save_stu...
CVE-2026-119619
A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This aff
Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions.
CVE-2026-118090
Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions.
Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions.
CVE-2026-118089
Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions.
Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions.
CVE-2026-116862
Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions.
Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions.
CVE-2026-116861
Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions.
Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.
CVE-2026-116854
Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.
Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions.
CVE-2026-116853
Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions.
Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions.
CVE-2026-116851
Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions.
CVE-2026-116847
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions.
Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions.
CVE-2026-116410
Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions.
Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions.
CVE-2026-116405
Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions.
Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions.
CVE-2026-115947
Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions.