The PiWeb Cancel order / Refund request for WooCommerce WordPress plugin before 1.3.4.34 does not...
CVE-2026-18603
The PiWeb Cancel order / Refund request for WooCommerce WordPress plugin before 1.3.4.34 does not have authorization or
#advisory
共收录 23530 条相关情报。
← 返回所有主题The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or...
CVE-2026-17014
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its
The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its...
CVE-2026-18464
The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is a
The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its...
CVE-2026-18465
The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is a
The Create WordPress plugin before 2.5.4 does not perform an authorization check before rendering...
CVE-2026-18037
The Create WordPress plugin before 2.5.4 does not perform an authorization check before rendering content over one of it
The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS...
CVE-2026-17011
The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpo
The WP Data Access WordPress plugin before 5.5.79 does not validate the column names it accepts...
CVE-2026-18032
The WP Data Access WordPress plugin before 5.5.79 does not validate the column names it accepts on one of its unauthent
The Slim SEO WordPress plugin before 4.9.11 does not restrict a post-meta preview feature to...
CVE-2026-16957
The Slim SEO WordPress plugin before 4.9.11 does not restrict a post-meta preview feature to posts the user is allowed
The GeoDirectory WordPress plugin before 2.8.169 does not perform any authorization check when...
CVE-2026-16988
The GeoDirectory WordPress plugin before 2.8.169 does not perform any authorization check when returning map marker dat
The WPC Order Tip for WooCommerce WordPress plugin before 3.3.1 does not perform authorisation or...
CVE-2026-18357
The WPC Order Tip for WooCommerce WordPress plugin before 3.3.1 does not perform authorisation or nonce checks in one of
The Solace Extra WordPress plugin before 1.6.1 does not perform capability or nonce checks in one...
CVE-2026-16965
The Solace Extra WordPress plugin before 1.6.1 does not perform capability or nonce checks in one of its AJAX actions, a
The CubeWP Framework WordPress plugin before 1.1.31 does not properly sanitize and escape a...
CVE-2026-17017
The CubeWP Framework WordPress plugin before 1.1.31 does not properly sanitize and escape a parameter before using it in
The Create WordPress plugin before 2.5.4 does not perform an authorization check before returning...
CVE-2026-16992
The Create WordPress plugin before 2.5.4 does not perform an authorization check before returning content over one of it
The Iptanus File Upload WordPress plugin before 5.1.8 does not properly sanitise and escape a...
CVE-2026-17044
The Iptanus File Upload WordPress plugin before 5.1.8 does not properly sanitise and escape a parameter before using it
A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36b0af6ee7c7f3e6ce8e08cda2170...
CVE-2026-19333
A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36b0af6ee7c7f3e6ce8e08cda2170/db03237d92f7dc2f0da0d70a
The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted...
CVE-2026-16032
The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted through an unauthenticated an
A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element...
CVE-2026-19330
A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function create_s
A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9....
CVE-2026-19334
A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9. This affects an unknown pa
A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0. Affected by this...
CVE-2026-19332
A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0. Affected by this vulnerability is an unknown functi
A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0. This affects the...
CVE-2026-19331
A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0. This affects the function readCanvas/writeCanva