The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the...
CVE-2026-16062
The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the deserialization of user-co
#advisory
共收录 23627 条相关情报。
← 返回所有主题The POUCO Import Users WordPress plugin through 1.0.0 does not perform any capability or nonce...
CVE-2026-16256
The POUCO Import Users WordPress plugin through 1.0.0 does not perform any capability or nonce checks on AJAX actions av
The Meta Box WordPress plugin before 5.13.1 does not verify that a user is authorized to delete...
CVE-2026-15248
The Meta Box WordPress plugin before 5.13.1 does not verify that a user is authorized to delete the supplied attachment
The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a...
CVE-2026-15151
The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its
The RT Mega Menu WordPress plugin before 1.5.2 does not perform a capability check on the AJAX...
CVE-2026-15385
The RT Mega Menu WordPress plugin before 1.5.2 does not perform a capability check on the AJAX action that saves mega-m
The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any...
CVE-2026-16285
The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before str
The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache...
CVE-2026-16042
The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache-clearing actions, allowin
The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not properly verify...
CVE-2026-16064
The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not properly verify authorization on the o
The Simple Restrict WordPress plugin before 1.2.9 does not enforce its content-restriction...
CVE-2026-15939
The Simple Restrict WordPress plugin before 1.2.9 does not enforce its content-restriction permission check on the REST
The Gallery for Google Photos WordPress plugin before 1.2.1 does not properly restrict access to...
CVE-2026-15236
The Gallery for Google Photos WordPress plugin before 1.2.1 does not properly restrict access to the stored third-party
The King Addons for Elementor WordPress plugin before 51.1.76 does not escape a user-supplied...
CVE-2026-14841
The King Addons for Elementor WordPress plugin before 51.1.76 does not escape a user-supplied grid setting before refle
The Element Pack Addons for Elementor WordPress plugin before 8.7.13 does not sanitize option...
CVE-2026-14817
The Element Pack Addons for Elementor WordPress plugin before 8.7.13 does not sanitize option values passed through cer
The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a...
CVE-2026-14938
The FluentBoards WordPress plugin before 1.95.3 does not verify that the items selected for a board import operation be
【安全通告】GitLab CE/EE 远程代码执行漏洞风险通告
【安全通告】GitLab CE/EE 远程代码执行漏洞风险通告
Improper Handling of HDF5 ExternalLinks in keras-team/keras
CVE-2026-9335
A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disclosure due to improp
The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all...
CVE-2026-8457
The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to and inc
The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions...
CVE-2026-18352
The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including,
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-17002
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up...
CVE-2026-13339
The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1
Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows...
CVE-2026-18556
Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass.