OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals...
CVE-2024-58375
OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into
#advisory
共收录 23530 条相关情报。
← 返回所有主题stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF...
CVE-2026-73058
stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthe
stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing...
CVE-2026-73057
stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause deni
The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable...
CVE-2024-13784
The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to PHP Object Injection
The Gallery by BestWebSoft plugin for WordPress is vulnerable to SQL Injection via the ...
CVE-2026-2497
The Gallery by BestWebSoft plugin for WordPress is vulnerable to SQL Injection via the '_gallery_order_{post_id}' parame
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is...
CVE-2026-18347
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypa
The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
CVE-2026-2357
The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bt_bb_shortcod
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_skcipher -...
CVE-2026-74578
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_skcipher - force synchronous processi
The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable...
CVE-2026-13424
The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Sc
The Infility Global plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...
CVE-2026-10734
The Infility Global plugin for WordPress is vulnerable to Stored Cross-Site Scripting via /cf7_record Log Endpoint in al
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
CVE-2026-12998
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure D
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to...
CVE-2026-17608
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forg
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is...
CVE-2026-17087
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to authorization
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is...
CVE-2026-17604
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversa
The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data...
CVE-2026-18316
The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capab
The Simple JWT Login WordPress plugin before 3.6.8 does not validate the audience of the Google...
CVE-2026-19714
The Simple JWT Login WordPress plugin before 3.6.8 does not validate the audience of the Google identity tokens it acce
The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up...
CVE-2026-17582
The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up to, and including, 9.1.7
The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the...
CVE-2026-19726
The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuration of its charts, all
The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id'...
CVE-2026-2283
The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id' parameter in all versions u
The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to...
CVE-2026-9767
The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'or