共收录 4167 条相关情报。
← 返回所有主题CVE-2026-75982
The LearnPress plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in version
CVE-2026-10627
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to authorization bypass i
CVE-2026-56707
Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass vulnerability in the flex-objects
CVE-2026-19801
The BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP plugin for WordPress is vulnera
CVE-2026-78266
Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.
CVE-2026-27364
Subscriber Broken Access Control in Style Kits <= 2.6.5 versions.
CVE-2026-78266
Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.
CVE-2026-27364
Subscriber Broken Access Control in Style Kits <= 2.6.5 versions.
CVE-2026-71509
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint t
CVE-2026-71508
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the user REST API update endpoint that allows
CVE-2026-71504
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API that allows attackers wi
CVE-2026-71509
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint t
CVE-2026-71508
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the user REST API update endpoint that allows
CVE-2026-71504
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API that allows attackers wi
CVE-2026-71933
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vul
CVE-2026-71933
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vul
CVE-2026-78387
RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config en
CVE-2026-39914
TIM Flow before 26.0.6 contains an improper authorization vulnerability that allows any authenticated user to submit arb
CVE-2026-78380
RansomLook fails to enforce the privacy status of ransomware groups and markets when distributing newly collected victim
CVE-2026-78372
RansomLook does not consistently enforce authorization checks when accessing groups, markets, and ransom notes marked