#severity:medium

共收录 5559 条相关情报。

← 返回所有主题
安全公告2026-07-11 发布INFO

The bbp Style Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions...

CVE-2026-15010

The bbp Style Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting...

CVE-2026-11591

The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all...

CVE-2026-6801

The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to...

CVE-2026-9017

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all ve

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The fresh Podcaster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...

CVE-2026-1382

The fresh Podcaster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'freshpodcaster' shortcode

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable...

CVE-2026-12738

The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypas

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The WP Hotel Booking plugin for WordPress is vulnerable to Insufficient Verification of Data...

CVE-2026-11901

The WP Hotel Booking plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all version

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The White Label CMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin...

CVE-2026-11898

The White Label CMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The Wallet for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all...

CVE-2026-12103

The Wallet for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable...

CVE-2026-12126

The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site S

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to Insecure Direct...

CVE-2026-10041

The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in al

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The Catalyst Connect Zoho CRM Client Portal plugin for WordPress is vulnerable to time-based SQL...

CVE-2025-5017

The Catalyst Connect Zoho CRM Client Portal plugin for WordPress is vulnerable to time-based SQL Injection via the ‘uid’

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The ThriveDesk – Live Chat, AI Chatbot, Helpdesk & Knowledge Base plugin for WordPress is...

CVE-2026-1832

The ThriveDesk – Live Chat, AI Chatbot, Helpdesk & Knowledge Base plugin for WordPress is vulnerable to unauthorized cac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure...

CVE-2026-13116

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The SurfLink - Ultimate Link Manager plugin for WordPress is vulnerable to unauthorized data...

CVE-2026-3552

The SurfLink - Ultimate Link Manager plugin for WordPress is vulnerable to unauthorized data modification due to a missi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...

CVE-2026-15097

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'height_slider' Slider Module

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Map...

CVE-2026-15096

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Map Module 'b_width_map' Field

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The Affilia – Affiliate Program & Referral Tracking for WordPress plugin for WordPress is...

CVE-2026-7559

The Affilia – Affiliate Program & Referral Tracking for WordPress plugin for WordPress is vulnerable to unauthorized acc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Missing...

CVE-2026-6803

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Missing Authorization in all versions

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-11 发布INFO

The Print, PDF, Email by PrintFriendly plugin for WordPress is vulnerable to Stored Cross-Site...

CVE-2026-9738

The Print, PDF, Email by PrintFriendly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conten

历史摘要 · 未重新核验 · GitHub Advisory