The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the...
CVE-2026-81652
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the requesting user is ent
#advisory
共收录 23334 条相关情报。
← 返回所有主题The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them...
CVE-2026-84223
The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them uploadable site-wide, al
The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that...
CVE-2026-92410
The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up del
The Tripzzy WordPress plugin before 1.5.1 does not perform any capability or ownership checks on...
CVE-2026-87840
The Tripzzy WordPress plugin before 1.5.1 does not perform any capability or ownership checks on its administrative boo
The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its...
CVE-2026-14844
The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before
The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or...
CVE-2026-92423
The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the req
The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability...
CVE-2026-85017
The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX actio
The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not...
CVE-2026-87839
The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not validate the identifier of t
aiyiyi121 SxDevOps settings.py information disclosure
CVE-2026-93971
A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevo
aiyiyi121 SxDevOps Settings settings.py hard-coded credentials
CVE-2026-93970
A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the fil
aiyiyi121 SxDevOps services.py ensure_default_superuser hard-coded credentials
CVE-2026-93969
A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_sup
aiyiyi121 SxDevOps UserSerializer serializers.py update privileges management
CVE-2026-93968
A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/
aiyiyi121 SxDevOps Command services.py generate_host_task command injection
CVE-2026-93967
A vulnerability was found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this issue is the function generate_host_task of th
aiyiyi121 SxDevOps TASK_RUN_COMMAND host_tasks.py paramiko.SSHClient.exec_command command injection
CVE-2026-93966
A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is the function paramiko.SS
aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection
CVE-2026-93965
A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops
NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication
CVE-2026-93964
A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCe
【DDoS 防护】关于计费模式升级的公告
【DDoS 防护】关于计费模式升级的公告
Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup...
CVE-2026-94083
Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected...
CVE-2026-94084
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.r
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This...
CVE-2026-93959
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown