今日共收录 398 条安全情报，包含 188 个 CVE，99 篇安全通告，以及 64 篇研究论文。
← 返回归档列表CVE-2026-120070
The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post
CVE-2026-120075
The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and includi
CVE-2026-110023
The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Sens
CVE-2026-11396
The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disc
CVE-2026-103997
The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5
CVE-2025-9462
The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up
CVE-2026-107759
The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subje
CVE-2026-88942
The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'wpf_
CVE-2026-103898
The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all versi
CVE-2026-103962
The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post
CVE-2026-90960
The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,
CVE-2026-119980
The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerab
CVE-2026-104012
The Rox Appointment Booking – Appointment Booking Scheduling Solution plugin for WordPress is vulnerable to Privilege Es
CVE-2026-120040
The Mail logging & Catcher plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, a
CVE-2026-111592
The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vu
CVE-2026-120019
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all
CVE-2025-11455
The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c
CVE-2026-119166
The Welcart e-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and
CVE-2026-116535
The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'di
CVE-2026-119162
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored