共收录 63078 条相关情报。
← 返回所有主题CVE-2026-115277
The User Frontend WordPress plugin before 4.3.14 does not sanitise and escape some user-supplied values before reflecti
CVE-2026-114444
The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its Fi
CVE-2026-114443
The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verify the acco
CVE-2026-114422
The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored m
CVE-2026-5461
The Forminator Forms plugin for WordPress is vulnerable to Limited File Deletion in all versions up to, and including, 1
CVE-2026-104368
The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up
CVE-2026-103963
A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, the
CVE-2026-96389
Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affects Xray Audit version
CVE-2026-118584
Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Per
CVE-2026-118583
Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Per
CVE-2026-118582
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass. Th
CVE-2026-118576
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Stage File
CVE-2026-118575
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Signature p
CVE-2026-118574
Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrect
CVE-2026-118573
Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing. This issue affects OAuth2 T
CVE-2026-118572
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows Aut
CVE-2026-118571
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting
CVE-2026-118570
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Fasttoggle allows Cross Site Request Forgery. This issue affec
CVE-2026-118569
Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful Browsing. This issue affects Fasttoggle versi
CVE-2026-118568
Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve Embedde