共收录 4087 条相关情报。
← 返回所有主题CVE-2026-95683
In MISP, the Overmind event view enriches an event with its most recent attached report for preview purposes. The enrich
CVE-2026-93344
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_get_page_
CVE-2026-95697
MISP contains an authorization flaw in the Organisation model's captureOrg method. When the $force parameter is set to t
CVE-2026-95671
In MISP, the CollectionsController add() method enforced the sharing-group usability authorization check and element cap
CVE-2026-93343
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_admin_ven
CVE-2026-93342
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_duplicate
CVE-2026-93341
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_send_refu
CVE-2026-95685
MISP contains an access control flaw in the EventReports functionality. The replaceSuggestionInReport action, which allo
CVE-2026-95683
In MISP, the Overmind event view enriches an event with its most recent attached report for preview purposes. The enrich
CVE-2026-95671
In MISP, the CollectionsController add() method enforced the sharing-group usability authorization check and element cap
CVE-2026-91092
The wpForo Forum plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.5.
CVE-2026-7622
The ThumbPress plugin for WordPress is vulnerable to unauthorized access in versions up to and including 6.2.1. This is
CVE-2026-4123
The RW Elephant Rental Inventory plugin for WordPress is vulnerable to Missing Authorization in all versions up to and i
CVE-2026-18345
The WP User Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability
CVE-2025-14487
The Handily plugin for WordPress is vulnerable to unauthorized payment settings modification due to missing authorizatio
CVE-2025-14486
The PixelPlay plugin for WordPress is vulnerable to unauthorized API key deletion due to missing authorization checks in
CVE-2025-14484
The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due to missing authorization chec
CVE-2026-77520
MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal user in the same workspace can
CVE-2026-77518
MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal workspace user who knows anothe
CVE-2026-77517
MaxKB is an open-source AI assistant for enterprise. From version 2.0.0 through 2.10.2-lts, document and paragraph opera