共收录 4087 条相关情报。
← 返回所有主题CVE-2026-4792
The Bread plugin for WordPress is vulnerable to information exposure in versions up to and including 2.9.12. This is due
CVE-2026-2278
The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch
CVE-2026-1984
The Ibtana – Ecommerce Product Addons plugin for WordPress is vulnerable to unauthorized post meta modification due to a
CVE-2026-15947
The Metasync plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o
CVE-2026-15946
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress
CVE-2026-11899
The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to authorizat
CVE-2026-92435
The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user holds the required
CVE-2026-92430
The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7 does not verify the aut
CVE-2026-86591
The Botiga Pro WordPress plugin before 1.6.5 does not perform any authorisation checks on one of its REST routes, allowi
CVE-2026-85574
The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the conf
CVE-2026-88944
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to authorization bypass in all v
CVE-2026-89334
The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to auth
CVE-2026-15660
The SEO Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.4.7. Thi
CVE-2026-15760
The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions up to, and including
CVE-2026-89334
The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to auth
CVE-2026-88944
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to authorization bypass in all v
CVE-2026-15760
The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions up to, and including
CVE-2026-15660
The SEO Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.4.7. Thi
CVE-2026-93921
SiYuan versions through 3.8.4 fail to enforce publish access control in the getDynamicIcon endpoint, allowing read-only
CVE-2026-93921
SiYuan 是一款开源的本地优先知识管理软件。在其 3.8.4 及之前版本中，getDynamicIcon 端点未能正确实施发布访问控制，导致仅持有只读令牌的用户可以绕过权限限制，访问受保护文档的元数据。攻击者可通过向该端点发送 type