nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a...
CVE-2026-58055
nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header an
#severity:medium
共收录 5559 条相关情报。
← 返回所有主题7-Zip for Windows through 26.02 fails to preserve the Mark-of-the-Web when extracting a crafted...
CVE-2026-58052
7-Zip for Windows through 26.02 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because it
The WP Full Stripe Free plugin for WordPress is vulnerable to Missing Authorization in versions...
CVE-2026-12432
The WP Full Stripe Free plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay,...
CVE-2026-11783
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPr
The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting...
CVE-2026-13295
The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via panels_data Paramet
The Spexo theme for WordPress is vulnerable to unauthorized access due to a missing capability...
CVE-2026-12471
The Spexo theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the activate_plu
The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable...
CVE-2026-12399
The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Sc
The Frisbii Pay plugin for WordPress is vulnerable to unauthorized modification of data due to...
CVE-2026-3462
The Frisbii Pay plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login...
CVE-2026-9242
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vu
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable...
CVE-2026-9233
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass
The Surbma | Infusionsoft Shortcode plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-11597
The Surbma | Infusionsoft Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'infusions
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay,...
CVE-2026-11987
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPr
The Masteriyo LMS – LMS Course Builder, Quizzes & Certificates plugin for WordPress is vulnerable...
CVE-2026-11773
The Masteriyo LMS – LMS Course Builder, Quizzes & Certificates plugin for WordPress is vulnerable to authorization bypas
The Product Specifications for WooCommerce plugin for WordPress is vulnerable to unauthorized...
CVE-2026-11364
The Product Specifications for WooCommerce plugin for WordPress is vulnerable to unauthorized modification, creation, an
The MaxButtons – Create buttons plugin for WordPress is vulnerable to Reflected Cross-Site...
CVE-2026-13245
The MaxButtons – Create buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'view' para
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to...
CVE-2026-12404
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all ve
The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-13335
The CodePeople Post Map for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cpm_point
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to...
CVE-2026-13333
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection
The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-11356
The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'menu_t
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a sensitive data exposure...
CVE-2025-59868
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a sensitive data exposure vulnerability which could allow an