#CVE

共收录 56389 条相关情报。

漏洞预警2026-10-31 发布MEDIUM

The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up to, and including, 3.5.6 due to insufficient escaping on...

CVE-2025-9462

The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-89 #severity:medium

漏洞预警2026-10-31 发布MEDIUM

The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/wp-retina-2x/v1/replace REST API in ...

CVE-2025-11455

The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-862 #severity:medium

漏洞预警2026-10-31 发布MEDIUM

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.29.24 via the WP_Object_Cache::_getFileP...

CVE-2026-90960

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-200 #severity:medium

漏洞预警2026-10-31 发布CRITICAL

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, ...

CVE-2026-89270

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to au

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-862 #severity:critical

漏洞预警2026-10-31 发布MEDIUM

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter in all versions up to, and including,...

CVE-2026-88942

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'wpf_

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:medium

漏洞预警2026-10-31 发布HIGH

The Mail logging & Catcher plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.0 via the 'message' parameter. This mak...

CVE-2026-120040

The Mail logging & Catcher plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, a

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-269 #severity:high

漏洞预警2026-10-31 发布MEDIUM

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2.10.7 due to insufficient...

CVE-2026-120019

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:medium

漏洞预警2026-10-31 发布MEDIUM

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in all versions up to, and including, 3.4.6 via th...

CVE-2026-11396

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disc

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-862 #severity:medium

漏洞预警2026-10-31 发布MEDIUM

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerable to unauthorized account access via Use of Predictable ...

CVE-2026-119980

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerab

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-287 #severity:medium

漏洞预警2026-10-31 发布MEDIUM

The Welcart e-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.12.5 via the 'member[ID]' parameter due to ...

CVE-2026-119166

The Welcart e-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-287 #severity:medium

漏洞预警2026-10-31 发布HIGH

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'bwfan_cart_id'...

CVE-2026-119163

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulne

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-89 #severity:high

漏洞预警2026-10-31 发布HIGH

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'user-submitted-co...

CVE-2026-119162

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:high

漏洞预警2026-10-31 发布HIGH

The ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' para...

CVE-2026-119089

The ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnera

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:high

漏洞预警2026-10-31 发布HIGH

The Shipping Zones by Drawing for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'szbd-picked' checkout parameter in versions up to, and i...

CVE-2026-119065

The Shipping Zones by Drawing for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:high

漏洞预警2026-10-31 发布HIGH

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gid' parameter in all versions up to, and including, 2.12.5 due to insufficient...

CVE-2026-118070

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gid' parameter in all

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:high

漏洞预警2026-10-31 发布CRITICAL

The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpbs_action_ajax_calend...

CVE-2026-116557

The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-862 #severity:critical

漏洞预警2026-10-31 发布HIGH

The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'optionals' parameter in all versions up to, and including,...

CVE-2026-116548

The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'o

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:high

漏洞预警2026-10-31 发布MEDIUM

The WP Job Portal – AI-Powered Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'degreetitle' parame...

CVE-2026-116546

The WP Job Portal – AI-Powered Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:medium

漏洞预警2026-10-31 发布HIGH

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.28.5 due t...

CVE-2026-116522

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' par

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:high

漏洞预警2026-10-31 发布HIGH

The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'poplink' parameter in all versions up to, and including, 1...

CVE-2026-115840

The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'p

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:high