The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its...
CVE-2026-92404
The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its REST API endpoints, allowi
#advisory
共收录 23334 条相关情报。
← 返回所有主题The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is...
CVE-2026-11899
The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to authorizat
The Botiga Pro WordPress plugin before 1.6.5 does not perform any authorisation checks on one of...
CVE-2026-86591
The Botiga Pro WordPress plugin before 1.6.5 does not perform any authorisation checks on one of its REST routes, allowi
The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user...
CVE-2026-85680
The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user supplied profile names bef
The Estatik Real Estate Plugin WordPress plugin before 4.3.5 does not sanitise and escape several...
CVE-2026-76790
The Estatik Real Estate Plugin WordPress plugin before 4.3.5 does not sanitise and escape several values decoded from a
The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.3 does not...
CVE-2026-19860
The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.3 does not sufficiently restrict which PH
The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check...
CVE-2026-85574
The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the conf
The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its...
CVE-2025-15698
The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its settings, which could
The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or...
CVE-2026-84750
The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uplo
The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an...
CVE-2026-76554
The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to
The Master Blocks WordPress plugin before 1.5.0 does not have authorisation on one of its REST...
CVE-2026-88824
The Master Blocks WordPress plugin before 1.5.0 does not have authorisation on one of its REST routes, allowing unauthe
The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check...
CVE-2026-16557
The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check when returning page-build
Redux Framework <= 4.5.13 - Authenticated (Subscriber+) Cross-Site Scripting via User Input
CVE-2026-5400
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media field filter values
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this...
CVE-2026-93741
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the functio
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于腾讯云 GLM-5、GLM-5-Turbo、GLM-5.1 模型下线及切换升级的通知
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于腾讯云 GLM-5、GLM-5-Turbo、GLM-5.1 模型下线及切换升级的通知
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to...
CVE-2026-88944
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to authorization bypass in all v
The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for...
CVE-2026-89093
The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Info
The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress...
CVE-2026-92229
The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitr
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to...
CVE-2026-89081
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected Cross-Site Scriptin
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to...
CVE-2026-89333
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Refere