共收录 58407 条相关情报。
← 返回所有主题CVE-2026-119526
Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Roy
CVE-2026-119117
Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the li
CVE-2026-118090
Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions.
CVE-2026-118089
Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions.
CVE-2026-118086
Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.
CVE-2026-116862
Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions.
CVE-2026-116861
Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions.
CVE-2026-116854
Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.
CVE-2026-116853
Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions.
CVE-2026-116852
Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions.
CVE-2026-116851
Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions.
CVE-2026-116847
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions.
CVE-2026-116410
Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions.
CVE-2026-116405
Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions.
CVE-2026-116401
Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions.
CVE-2026-116386
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions.
CVE-2026-115947
Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions.
CVE-2026-115604
Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versions.
CVE-2026-114711
Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions.
CVE-2026-109213
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-113499. Reason: This candidate is a