共收录 57397 条相关情报。
← 返回所有主题CVE-2026-118500
The Cool FormKit Lite – Advanced Form Builder for Elementor plugin for WordPress is vulnerable to Stored DOM-Based Cross
CVE-2026-118194
The Page and Post Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and inc
CVE-2026-118165
The Firelight Lightbox WordPress plugin before 2.3.23 does not escape the URL of links it opens in its Classic lightbox
CVE-2026-118101
The BuddyForms WordPress plugin before 2.10.1 does not verify that a user editing an existing entry is the author of the
CVE-2026-118100
The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before expor
CVE-2026-118072
The Fraud Prevention For WooCommerce and EDD WordPress plugin before 2.3.6 does not check that a user is allowed to mana
CVE-2026-118071
The Joinchat WordPress plugin before 6.4.2 does not escape the message of its button block before outputting it in an H
CVE-2026-117572
The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and escape a parameter befor
CVE-2026-117571
The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and escape tracking data der
CVE-2026-115277
The User Frontend WordPress plugin before 4.3.14 does not sanitise and escape some user-supplied values before reflecti
CVE-2026-114444
The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its Fi
CVE-2026-114443
The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verify the acco
CVE-2026-114422
The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored m
CVE-2026-5461
The Forminator Forms plugin for WordPress is vulnerable to Limited File Deletion in all versions up to, and including, 1
CVE-2026-104368
The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up
CVE-2026-103963
A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, the
CVE-2026-96389
Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affects Xray Audit version
CVE-2026-118584
Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Per
CVE-2026-118583
Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Per
CVE-2026-118582
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass. Th