共收录 3925 条相关情报。
← 返回所有主题CVE-2026-111372
The AI ChatBot for WooCommerce – WoowBot plugin for WordPress is vulnerable to authorization bypass in all versions up t
CVE-2026-111213
The Travelly – Tour & Travel Booking Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass
CVE-2026-110020
The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to authorization bypass in all versions up to, a
CVE-2026-109980
The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up
CVE-2026-109979
The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to,
CVE-2026-113813
The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not perform any capability or ownership check
CVE-2026-110691
The WPOrLogin WordPress plugin before 3.1.0 does not perform a capability check or validate a nonce before updating its
CVE-2026-107097
The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not perform any authorization check before using t
CVE-2026-106647
The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not scope a contact form's email delivery configur
CVE-2026-106002
The Court Reservation WordPress plugin before 1.12.4 does not perform any authorisation or nonce verification on one of
CVE-2026-105997
The Booking Package WordPress plugin before 1.7.33 does not restrict who can trigger its booking verification-code email
CVE-2026-116613
The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and incl
CVE-2026-115624
GROWI contains a missing authorization check vulnerability in its collaborative editing feature. By exploiting this vuln
CVE-2026-115624
GROWI contains a missing authorization check vulnerability in its collaborative editing feature. By exploiting this vuln
CVE-2026-118333
Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin po
CVE-2026-58255
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.121, a non-administrat
CVE-2026-118333
Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin po
CVE-2026-112355
The MembershipWorks plugin for WordPress before 6.17 contains an information disclosure vulnerability that allows unauth
CVE-2026-16491
Grafana’s RBAC service ignored the requested folder when checking whether a user was a folder administrator for deleted
CVE-2026-116677
OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI manage