The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL...
CVE-2026-96267
The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL Injection via the 'fullR
#advisory
共收录 23210 条相关情报。
← 返回所有主题The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in...
CVE-2026-100157
The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, an
The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is...
CVE-2026-18443
The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic
The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in...
CVE-2026-103519
The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, an
The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-93889
The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wp_m
The Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) plugin for...
CVE-2026-97343
The Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to I
The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to...
CVE-2026-15795
The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Script
MLS external commit can remove an arbitrary group member
CVE-2026-71890
In Bouncy Castle for Java before 1.86, validation of an MLS (RFC 9420) external commit's proposal list, org.bouncycastle
BLS12-381 key validation accepts a public key built on a foreign curve
CVE-2026-71891
In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicSc
HQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight sampler
CVE-2026-18040
In Bouncy Castle for Java before 1.86, HQC leaked secret-derived data through two side channels: its GF(2^8) arithmetic
MLS X.509 credential not bound to the LeafNode signature key
CVE-2026-71885
In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509
OpenPGP certification accepted from a subkey without certification authority
CVE-2026-71886
In Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or tr
OpenPGP data signature accepted from a signing subkey without cross-certification
CVE-2026-71887
In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey who
Native AES packet cipher returns the raw AES key on an alias
CVE-2026-71883
In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM
CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent
CVE-2026-71888
In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorit
PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate
CVE-2026-71889
In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathR
CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys
CVE-2026-71892
In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.
OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check
CVE-2026-85515
In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on
Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider
CVE-2026-97873
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and PKCS#12 PBE families ra
Linux Mint Xreader EPUB File epub-document.c g_strdup_printf path traversal
CVE-2026-104982
A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function setup_document_content_list/g_s