The Booking Package plugin for WordPress is vulnerable to Privilege Escalation via Account...
CVE-2026-9851
The Booking Package plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in versions up to, a
#severity:high
共收录 5509 条相关情报。
← 返回所有主题Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud...
CVE-2025-2414
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypa
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta...
CVE-2025-2415
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypas
The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to...
CVE-2026-8438
The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting
The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More...
CVE-2026-8901
The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More plugin for WordPress is vuln
The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to...
CVE-2026-9290
The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in al
A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium...
CVE-2026-11431
A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and A
On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a...
CVE-2026-34123
On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a limited set of low‑sensit
A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared...
CVE-2026-11424
A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared by Altium Enterprise Ser
The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote...
CVE-2026-7654
The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in version
MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage...
CVE-2026-11416
MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage download handlers where
Twig: Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points
CVE-2026-47732
### Description `SandboxNodeVisitor` enforces `SecurityPolicy::checkMethodAllowed()` for implicit `__toString()` calls
An input validation command execution vulnerability exists in the browser management pipeline of...
CVE-2026-25623
An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Mana
A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat...
CVE-2026-25622
A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Ge
Markdown Preview Enhanced 0.8.x with crossnote engine 0.9.28 contains a code injection...
CVE-2026-11422
Markdown Preview Enhanced 0.8.x with crossnote engine 0.9.28 contains a code injection vulnerability in the WaveDrom ren
An encrypted password command injection vulnerability exists in the Captive Portal application...
CVE-2026-25620
An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge
A Reports application infrastructure vulnerability exists in Arista Edge Threat Management -...
CVE-2026-25621
A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Fire
The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the...
CVE-2026-5411
The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for Wor
The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the...
CVE-2026-5415
The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for Wor
Twig: Possible sandbox bypass when using a source policy
CVE-2026-24425
# Description When using the sandbox with a `SourcePolicyInterface`, Twig does not always apply the sandbox restriction