The Simple File List plugin for WordPress is vulnerable to arbitrary file modification due to insufficient authorization checks in all versions up to, and including, 6.3.7. This...

CVE-2026-11912

The Simple File List plugin for WordPress is vulnerable to arbitrary file modification due to insufficient authorization

历史摘要 · 未重新核验 · NVD

Capgo before 12.128.2 contains an authorization bypass vulnerability in the public...

CVE-2026-56213

Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.upsert_version_meta SECURITY DEFINER

历史摘要 · 未重新核验 · GitHub Advisory

Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.upsert_version_meta SECURITY DEFINER function exposed via PostgREST RPC, allowing unauthentica...

CVE-2026-56213

CVE-2026-56213 是 Capgo 软件（版本 12.128.2 之前）中存在的一个授权绕过漏洞。Capgo 通过 PostgREST RPC 暴露了 `public.upsert_version_meta` 函数，该函数被定义为

历史摘要 · 未重新核验 · NVD

Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions

## Summary `network-ai`'s `ApprovalInbox` (`lib/approval-inbox.ts`) is a shipped, exported, documented feature — *"a we

历史摘要 · 未重新核验 · GitHub Advisory

Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate...

CVE-2026-48582

Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · GitHub Advisory

The WP Go Maps – Most Popular Map Plugin plugin for WordPress is vulnerable to authorization...

CVE-2026-12238

The WP Go Maps – Most Popular Map Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up t

历史摘要 · 未重新核验 · GitHub Advisory

Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.

CVE-2026-48582

Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

mcp-memory-service is a semantic memory layer for AI applications. Prior to version 10.65.3, the HTTP MCP JSON-RPC endpoint at `/mcp` requires only OAuth `read` scope for all re...

CVE-2026-49291

mcp-memory-service is a semantic memory layer for AI applications. Prior to version 10.65.3, the HTTP MCP JSON-RPC endpo

历史摘要 · 未重新核验 · NVD

Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.23 and 6.20.0, an authenticated Control Panel user could view metadata and content for resou...

CVE-2026-49288

Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.23 and 6.20.0, an authenticated Con

历史摘要 · 未重新核验 · NVD

The WP Go Maps – Most Popular Map Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.1.01. This is due to the plugin not ...

CVE-2026-12238

The WP Go Maps – Most Popular Map Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up t

历史摘要 · 未重新核验 · NVD

Line Desktop MCP is a project that, while unaffiliated with the official line-bot-mcp-server, allows users to directly operate the LINE Desktop application on Windows or Mac via...

CVE-2026-49357

Line Desktop MCP is a project that, while unaffiliated with the official line-bot-mcp-server, allows users to directly o

历史摘要 · 未重新核验 · NVD

The 2Download Connector for 2DL Hosted Checkout plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 0.1.5. This is due to the plugin ...

CVE-2026-6798

The 2Download Connector for 2DL Hosted Checkout plugin for WordPress is vulnerable to unauthorized access in all version

历史摘要 · 未重新核验 · NVD

The STRABL – A checkout solution plugin for WordPress is vulnerable to Missing Authentication in all versions up to and including 4.5. The plugin registers a REST API webhook en...

CVE-2026-3640

The STRABL – A checkout solution plugin for WordPress is vulnerable to Missing Authentication in all versions up to and

历史摘要 · 未重新核验 · NVD

The Bogo plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the bogo_rest_create_post_translation. This makes i...

CVE-2026-9013

The Bogo plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.

历史摘要 · 未重新核验 · NVD

The Classified Listing – Classified ads & Business Directory plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 5.4.2. This is due...

CVE-2026-10779

The Classified Listing – Classified ads & Business Directory plugin for WordPress is vulnerable to Missing Authorization

历史摘要 · 未重新核验 · NVD

The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.39. This is due to the plugin not properly verifyi...

CVE-2026-10034

The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includin

历史摘要 · 未重新核验 · NVD

An attacker within BLE communication range can monopolize the device's only available BLE...

CVE-2026-52866

An attacker within BLE communication range can monopolize the device's only available BLE connection slot, preventing l

历史摘要 · 未重新核验 · GitHub Advisory

An attacker within BLE communication range can monopolize the device's only available BLE connection slot, preventing legitimate users or applications from establishing a conn...

CVE-2026-52866

CVE-2026-52866 是一个影响通过 BLE（蓝牙低功耗）通信的设备的漏洞。该漏洞允许攻击者在 BLE 通信范围内，通过独占设备唯一可用的 BLE 连接槽，阻止合法用户或应用程序建立连接。这会导致设备无法被正常配对或使用，从而引发拒

历史摘要 · 未重新核验 · NVD

phpMyFAQ is an open source FAQ web application. Versions prior to 4.1.4 have Missing Authorization in the API CategoryController. CVE-2026-24421 addressed this in the BackupCon...

CVE-2026-49205

phpMyFAQ is an open source FAQ web application. Versions prior to 4.1.4 have Missing Authorization in the API CategoryC

历史摘要 · 未重新核验 · NVD

OpenClaw: Focus command could miss controlScope enforcement

CVE-2026-53850

### Summary Focus command could miss controlScope enforcement. In affected versions, a caller able to trigger the focus

历史摘要 · 未重新核验 · GitHub Advisory