共收录 63078 条相关情报。
← 返回所有主题CVE-2026-108763
The Wallet System for WooCommerce WordPress plugin before 2.8.2 does not restrict its KYC document submission handler t
CVE-2026-108686
The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settings it returns to visitors, all
CVE-2026-108685
The WP Post Author WordPress plugin before 4.2.0 does not check that the account was created before updating its profil
CVE-2026-105258
The Appointment Booking Plugin WordPress plugin before 5.7.6 does not escape several booking-form step content settings
CVE-2026-103693
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an una
CVE-2024-3586
The LetterPress WordPress plugin before 2.4.0 does not sanitise and escape some of its settings, which could allow high
CVE-2026-96741
The DSGVO All in one for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Ou
CVE-2026-96669
The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'se
CVE-2026-96666
The Schema App Structured Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via
CVE-2026-96228
SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including,
CVE-2026-93904
The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to generic S
CVE-2026-93855
The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'subscriberid' paramete
CVE-2026-93757
The Wild Apricot Login plugin for WordPress is vulnerable to Authentication Bypass via SSO Email-Collision Account Bindi
CVE-2026-42949
A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): 1.3.2-2809). A spec
CVE-2026-42922
A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially
CVE-2026-40063
A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809
CVE-2026-118426
In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call
CVE-2026-109516
The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeo
CVE-2026-66092
In openEQUELLA before 2026.2, the pre-login notice is stored as HTML and rendered on the legacy logon page without encod
CVE-2026-66091
In openEQUELLA before 2026.1, the GET /api/userquery/userinfobackup endpoint performs no authentication or authorisation