#severity:medium

共收录 5514 条相关情报。

← 返回所有主题
安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 contains a reachable assertion (WINPR_ASSERT(OutputBufferLength ==...

CVE-2026-67303

FreeRDP before 3.29.0 contains a reachable assertion (WINPR_ASSERT(OutputBufferLength == BytesReturned)) in serial_proce

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6...

CVE-2026-67306

FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder fu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

better-auth versions after v0.0.2 and before 1.1.16 contain a reflected cross-site scripting (XSS...

CVE-2025-71404

better-auth versions after v0.0.2 and before 1.1.16 contain a reflected cross-site scripting (XSS) vulnerability on the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable...

CVE-2026-18062

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site S

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to...

CVE-2026-18059

The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Sensitive Information Exp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products...

CVE-2026-17580

The Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elem

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable...

CVE-2026-18435

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site S

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is...

CVE-2026-17605

The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Local File Incl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin...

CVE-2026-17571

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulne

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The Wp Responsive Thumbnail Slider plugin for WordPress is vulnerable to Reflected Cross-Site...

CVE-2026-18344

The Wp Responsive Thumbnail Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' par

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The Easy Property Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...

CVE-2026-16684

The Easy Property Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'facebook' User Contact

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The CubeWP Framework plugin for WordPress is vulnerable to SQL Injection in all versions up to...

CVE-2026-6453

The CubeWP Framework plugin for WordPress is vulnerable to SQL Injection in all versions up to and including 1.1.30. Thi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The GSheetConnector – CF7 Google Sheets Connector with Real-Time Sync plugin for WordPress is...

CVE-2026-16614

The GSheetConnector – CF7 Google Sheets Connector with Real-Time Sync plugin for WordPress is vulnerable to generic SQL

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon'...

CVE-2026-16685

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' Shortcode Attribute in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The WPvivid Backup & Migration plugin for WordPress is vulnerable to SQL Injection via the...

CVE-2026-17555

The WPvivid Backup & Migration plugin for WordPress is vulnerable to SQL Injection via the export_data parameter in vers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross...

CVE-2026-15644

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'st

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress...

CVE-2026-16090

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is...

CVE-2026-15662

The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Sit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The Icegram Mailer plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter...

CVE-2026-15951

The Icegram Mailer plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in versions up to, and

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-01 发布INFO

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross...

CVE-2026-15649

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Sho

历史摘要 · 未重新核验 · GitHub Advisory