The WP Directory Kit WordPress plugin before 1.5.5 does not sanitize and escape a parameter...
CVE-2026-16589
The WP Directory Kit WordPress plugin before 1.5.5 does not sanitize and escape a parameter before using it in a SQL sta
#advisory
共收录 23530 条相关情报。
← 返回所有主题A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the...
CVE-2026-19270
A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function get_journey/delete_jo
The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before...
CVE-2026-16535
The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a r
A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function...
CVE-2026-19266
A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the f
A vulnerability was found in INQUIRELAB mcp-bridge-api up to...
CVE-2026-19263
A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114. The impacted elem
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0...
CVE-2026-16574
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.11 does not verify that
The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks...
CVE-2026-16595
The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks on one of its authenti
A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1. The affected element is...
CVE-2026-19259
A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function MmsMapping
The Download Monitor WordPress plugin before 5.2.6 does not perform authorization checks on one...
CVE-2026-16608
The Download Monitor WordPress plugin before 5.2.6 does not perform authorization checks on one of its download-logging
The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in...
CVE-2026-14526
The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and
The Appointment Hour Booking WordPress plugin before 1.5.88 does not validate a client-supplied...
CVE-2026-16282
The Appointment Hour Booking WordPress plugin before 1.5.88 does not validate a client-supplied booking price against t
The Newsletters WordPress plugin before 4.16 does not restrict the classes allowed when...
CVE-2026-16267
The Newsletters WordPress plugin before 4.16 does not restrict the classes allowed when unserialising a value taken from
The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key...
CVE-2026-16269
The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key, allowing unauthentica
The Easy Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...
CVE-2026-18988
The Easy Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'accordionTitleTag' block a
In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on...
CVE-2026-8798
In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried
In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X...
CVE-2026-13505
In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X ser
【容器服务 TKE】关于 TKE 基础监控指标存储时长调整的公告
【容器服务 TKE】关于 TKE 基础监控指标存储时长调整的公告
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-4438
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient...
CVE-2026-9031
An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied da
A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous...
CVE-2026-9030
A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction han