#CVE

共收录 57397 条相关情报。

← 返回所有主题
漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.

CVE-2026-61998

Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.

CVE-2026-61997

Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions.

CVE-2026-61996

Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions.

CVE-2026-61995

Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions.

CVE-2026-61993

Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions.

CVE-2026-61992

Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions.

CVE-2026-61991

Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings <= 3.5.25 versions.

CVE-2026-61989

Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings <= 3.5.25 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in Auction Nudge – Your eBay on Your Site <= 8.4.0 versions.

CVE-2026-61988

Unauthenticated Cross Site Scripting (XSS) in Auction Nudge – Your eBay on Your Site <= 8.4.0 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= 1.2.8 versions.

CVE-2026-54866

Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= 1.2.8 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar <= 1.0.8 versions.

CVE-2026-54865

Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar <= 1.0.8 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions.

CVE-2026-54864

Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.

CVE-2026-54860

Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.

CVE-2026-54859

Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.

CVE-2026-54858

Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.

CVE-2026-54857

Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.

CVE-2026-54856

Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Insertion of Sensitive Information Into Sent Data vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows Retrieve Embedded Sensitive Data.This issue a...

CVE-2026-48200

Insertion of Sensitive Information Into Sent Data vulnerability in Barn2 Plugins Document Library Lite document-library-

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Shop manager PHP Object Injection in YayMail <= 4.4.6 versions.

CVE-2026-42701

Shop manager PHP Object Injection in YayMail <= 4.4.6 versions.

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki kirki allows Code Injection.This issue affects Kirki: from n/a throu...

CVE-2026-42694

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki kirki allow

来源摘录 · NVD