共收录 4167 条相关情报。
← 返回所有主题CVE-2026-77694
CVE-2026-77694 是 WordPress 的 Eventin 插件（版本 < 4.1.19）中存在的一个安全漏洞。该插件用于活动管理和票务销售。漏洞的根源在于插件对访客结账令牌（guest checkout token）的授权范
CVE-2026-75798
The AI Engine WordPress 插件在 3.7.2 之前的版本中存在一个安全漏洞。该插件的一个管理专用功能（administration-only feature）在执行授权检查时存在缺失，而是依赖于一个分发给匿名访问者的令
CVE-2026-74928
The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing
CVE-2026-14550
The WPCafe WordPress plugin before 3.0.18 does not perform an authorization check when creating a reservation through i
CVE-2026-13406
The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or nonce check before r
CVE-2026-13172
The Eventin WordPress plugin before 4.1.22 does not restrict access to non-published content by status or ownership in
CVE-2026-80191
GROWI applies its page-viewer permission check to attachment requests only when the request carries an authenticated use
CVE-2026-16645
Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Bro
CVE-2026-15916
Missing Authorization vulnerability in Drupal Drupal core allows Forceful Browsing. This issue affects Drupal core versi
CVE-2026-16645
Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Bro
CVE-2026-15916
Missing Authorization vulnerability in Drupal Drupal core allows Forceful Browsing. This issue affects Drupal core versi
CVE-2026-62861
TypeBot is a chatbot builder tool. Prior to 3.18.0, any authenticated non-guest workspace member can remove another work
CVE-2026-79286
Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to po
CVE-2026-79286
Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to po
CVE-2026-79212
Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised
CVE-2026-79208
Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive infor
CVE-2026-79184
Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised t
CVE-2026-79154
Missing authorization in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social en
CVE-2026-79116
Missing authorization in Viz in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the r
CVE-2026-79110
Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin