共收录 4228 条相关情报。
← 返回所有主题CVE-2026-39910
STACKIT IaaS API contains a missing authorization check in the PUT servers service-accounts endpoint. An authenticated,
CVE-2026-46444
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, all CRU
CVE-2026-7624
The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to authorization bypass in all versions up to, and inc
CVE-2026-8502
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive
CVE-2026-7624
The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to authorization bypass in all versions up to, and inc
CVE-2026-8502
LearnPress – WordPress LMS 插件（版本 ≤4.3.6）存在敏感信息泄露漏洞。未认证攻击者可通过向 /wp-json/lp/v1/courses/archive-course 端点发送特制请求，利用 'return_
CVE-2026-9008
The Page-list plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.2. Thi
CVE-2026-9008
该漏洞存在于 WordPress 的 Page-list 插件（版本 ≤ 6.2）中，属于授权缺失（Missing Authorization）。问题源于 `pagelist_unqprfx_ext_shortcode()` 函数（对应短代
CVE-2026-8976
The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is
CVE-2026-7523
The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. T
CVE-2026-8976
The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator 是一款WordPress插件，用于RSS聚合和
CVE-2026-7523
The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. T
CVE-2026-47728
### Summary Bugsink before 2.2.0 resolved sourcemaps and debug files by debug ID without scoping that lookup to the pro
CVE-2026-47745
## Impact The admin tables for `PaymentMethods`, `Currencies` and `Carriers` exposed inline toggles and per-record acti
CVE-2026-47742
## Impact Sub-form Livewire components used in the product editor (`Edit`, `Inventory`, `Seo`, `Shipping`, `Files`) had
CVE-2026-10737
The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability
CVE-2026-10737
SP Project & Document Manager 是一个 WordPress 插件，用于管理项目文件和文档。该插件在 4.71 及之前版本中存在一个未授权访问漏洞（CVE-2026-10737），源于 view_file 函数缺少
CVE-2026-44281
GLPI is a free asset and IT management software package. Starting in version 0.78 and prior to versions 10.0.25 and 11.0
CVE-2026-42320
GLPI is a free asset and IT management software package. Starting in version 0.50 and prior to versions 10.0.25 and 11.0
CVE-2026-42318
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to versions 10.0.25 and 11.