#CVE

共收录 56389 条相关情报。

← 返回所有主题

漏洞预警2026-10-31 发布HIGH

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2.10.7 due to insufficient...

CVE-2026-111254

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:high

漏洞预警2026-10-31 发布MEDIUM

The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Graph og:title meta tag of a webmention source URL in versions up to, and including...

CVE-2026-111109

The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Graph og:title meta tag of

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:medium

漏洞预警2026-10-31 发布MEDIUM

The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized Media Library File Deletion in all versions up to, and including, 1.2.31. This is due to the...

CVE-2026-110251

The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized Media Library File Deletion in all

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-22 #severity:medium

漏洞预警2026-10-31 发布MEDIUM

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.8.14.3. This is ...

CVE-2026-109386

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization bypass

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-862 #severity:medium

漏洞预警2026-10-31 发布CRITICAL

The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.1.1 via the '...

CVE-2026-109220

The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Inject

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-502 #severity:critical

漏洞预警2026-10-31 发布MEDIUM

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.16.5 via the 'invoi...

CVE-2026-109217

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-524 #severity:medium

漏洞预警2026-10-31 发布MEDIUM

The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 via the user profile Webs...

CVE-2026-107765

The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versi

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:medium

漏洞预警2026-10-31 发布HIGH

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'billing_address.first_name / last_name / company, cus...

CVE-2026-107750

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:high

漏洞预警2026-10-31 发布HIGH

The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPress is vulnerable to Stored Cross-Site...

CVE-2026-107653

The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payment

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:high

漏洞预警2026-10-31 发布INFO

The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incoming payment notification before marking a WooCommerce order...

CVE-2026-94361

The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incomin

来源摘录 · NVD / GitHub Advisory

#advisory #cve

漏洞预警2026-10-31 发布MEDIUM

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation in the '...

CVE-2026-92294

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to limited file d

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-862 #severity:medium

漏洞预警2026-10-31 发布INFO

The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing un...

CVE-2026-82214

The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before ret

来源摘录 · NVD / GitHub Advisory

#advisory #cve

漏洞预警2026-10-31 发布HIGH

WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgra...

CVE-2026-119977

WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-acc

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-367 #severity:high

漏洞预警2026-10-31 发布INFO

The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route that writes post data, allowing unauthenticated attackers to overw...

CVE-2026-118638

The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route that writ

来源摘录 · NVD / GitHub Advisory

#advisory #cve

漏洞预警2026-10-31 发布INFO

The All-in-One Video Gallery WordPress plugin before 5.0.0 does not check a video's publication status before rendering it on its player page, allowing unauthenticated users to...

CVE-2026-118629

The All-in-One Video Gallery WordPress plugin before 5.0.0 does not check a video's publication status before rendering

来源摘录 · NVD / GitHub Advisory

#advisory #cve

漏洞预警2026-10-31 发布INFO

The Firelight Lightbox WordPress plugin before 2.3.24 does not properly escape image attribute values before processing them in the browser, which could allow users with contrib...

CVE-2026-118438

The Firelight Lightbox WordPress plugin before 2.3.24 does not properly escape image attribute values before processing

来源摘录 · NVD / GitHub Advisory

#advisory #cve

漏洞预警2026-10-31 发布INFO

The BuddyForms WordPress plugin before 2.10.1 does not properly verify ownership before deleting guest-uploaded attachments, allowing unauthenticated attackers to permanently de...

CVE-2026-118437

The BuddyForms WordPress plugin before 2.10.1 does not properly verify ownership before deleting guest-uploaded attachme

来源摘录 · NVD / GitHub Advisory

#advisory #cve

漏洞预警2026-10-31 发布INFO

The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that can be submitted for a pending login, allowing an attacke...

CVE-2026-118185

The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that

来源摘录 · NVD / GitHub Advisory

#advisory #cve

漏洞预警2026-10-31 发布INFO

The Premium Packages WordPress plugin before 7.2.2 does not prevent unauthenticated visitors from overwriting the stored price of items in their shopping cart, allowing them to...

CVE-2026-118184

The Premium Packages WordPress plugin before 7.2.2 does not prevent unauthenticated visitors from overwriting the store

来源摘录 · NVD / GitHub Advisory

#advisory #cve

漏洞预警2026-10-31 发布INFO

The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a file on the server, allowing users with the Author role to m...

CVE-2026-118043

The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a fil

来源摘录 · NVD / GitHub Advisory

#advisory #cve