#severity:medium

共收录 5506 条相关情报。

← 返回所有主题
漏洞预警2026-10-31 发布MEDIUM

A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, decompress_xpi_thread...

CVE-2026-118599

A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webexte

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window...

CVE-2026-118598

A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_images' paramet...

CVE-2026-116752

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation Token Reuse in versions up to, and including, 4.1.4. This...

CVE-2026-109231

The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The FlexStock – Product Stock Sync with Google Sheets for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'products[].post_content' paramet...

CVE-2026-107711

The FlexStock – Product Stock Sync with Google Sheets for WooCommerce plugin for WordPress is vulnerable to Stored Cross

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '<fieldname>_start / <fieldname>_end' parameter in all ver...

CVE-2026-104926

The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via...

CVE-2026-100151

The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is v

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' ...

CVE-2026-119160

The Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News plugin for WordPress is vulnerab

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin for WordPress is vulnerable to Sensitive Information Exposu...

CVE-2026-109367

The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin fo

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.12 via t...

CVE-2026-103915

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Sensitive Information Ex

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 4.18.1 due to insufficient escaping o...

CVE-2026-101325

The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' parameter in all versions up to, and includin...

CVE-2026-116535

The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'di

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name (ma...

CVE-2026-111592

The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vu

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.2.4. This is d...

CVE-2026-111070

The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site Scr

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inc...

CVE-2026-110023

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Sens

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.15. This is due to the plugin not properly verifying tha...

CVE-2026-103997

The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Reflect...

CVE-2026-103962

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up to, and including, 3.5.6 due to insufficient escaping on...

CVE-2025-9462

The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/wp-retina-2x/v1/replace REST API in ...

CVE-2025-11455

The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-31 发布MEDIUM

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.29.24 via the WP_Object_Cache::_getFileP...

CVE-2026-90960

The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,

来源摘录 · NVD / GitHub Advisory