#cwe-862

共收录 4087 条相关情报。

← 返回所有主题
安全公告2026-09-19 发布INFO

The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all...

CVE-2026-9232

The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The Empik for Woocommerce plugin for WordPress is vulnerable to authorization bypass in all...

CVE-2026-9766

The Empik for Woocommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The Partial Shipment for Woocommerce plugin for WordPress is vulnerable to Missing Authorization...

CVE-2026-9858

The Partial Shipment for Woocommerce plugin for WordPress is vulnerable to Missing Authorization in versions up to, and

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The Flex Import plugin for WordPress is vulnerable to Missing Authorization in all versions up to...

CVE-2026-9615

The Flex Import plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.0. T

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The Metasync plugin for WordPress is vulnerable to unauthorized modification of data due to a...

CVE-2026-15947

The Metasync plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The Ibtana – Ecommerce Product Addons plugin for WordPress is vulnerable to unauthorized post...

CVE-2026-1984

The Ibtana – Ecommerce Product Addons plugin for WordPress is vulnerable to unauthorized post meta modification due to a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The Bread plugin for WordPress is vulnerable to information exposure in versions up to and...

CVE-2026-4792

The Bread plugin for WordPress is vulnerable to information exposure in versions up to and including 2.9.12. This is due

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to...

CVE-2026-2278

The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI...

CVE-2026-15946

The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting...

CVE-2026-92435

The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user holds the required

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7...

CVE-2026-92430

The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7 does not verify the aut

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is...

CVE-2026-11899

The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to authorizat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The Botiga Pro WordPress plugin before 1.6.5 does not perform any authorisation checks on one of...

CVE-2026-86591

The Botiga Pro WordPress plugin before 1.6.5 does not perform any authorisation checks on one of its REST routes, allowi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check...

CVE-2026-85574

The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the conf

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-19 发布INFO

The Partial Shipment for Woocommerce plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.4 via the wxp_order_shipment, wxp_order_item...

CVE-2026-9858

The Partial Shipment for Woocommerce plugin for WordPress is vulnerable to Missing Authorization in versions up to, and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-19 发布INFO

The Empik for Woocommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.1. This is due to the plugin not properly verifyin...

CVE-2026-9766

The Empik for Woocommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-19 发布INFO

The Datalogics Ecommerce Delivery – Datalogics plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.65. This is due to the plugin...

CVE-2026-9613

The Datalogics Ecommerce Delivery – Datalogics plugin for WordPress is vulnerable to authorization bypass in all version

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-19 发布INFO

The TikTok plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.1. This is due to the plugin not properly verifying that a user i...

CVE-2026-18346

The TikTok plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.1. This

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-19 发布INFO

The Flex Import plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.0. This is due to the license_activate_fleximp() and license_...

CVE-2026-9615

The Flex Import plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.0. T

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-19 发布INFO

The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.27 via the handle_customers_ajax. This make...

CVE-2026-9232

The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in

历史摘要 · 未重新核验 · NVD