#severity:medium
共收录 5506 条相关情报。
← 返回所有主题 漏洞预警2026-10-31 发布MEDIUM
CVE-2026-118599
A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files.
In src/webexte
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-118598
A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-116752
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-109231
The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-107711
The FlexStock – Product Stock Sync with Google Sheets for WooCommerce plugin for WordPress is vulnerable to Stored Cross
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-104926
The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-100151
The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is v
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-119160
The Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News plugin for WordPress is vulnerab
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-109367
The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin fo
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-103915
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Sensitive Information Ex
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-101325
The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-116535
The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'di
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-111592
The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vu
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-111070
The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site Scr
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-110023
The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Sens
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-103997
The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-103962
The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2025-9462
The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2025-11455
The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c
来源摘录 · NVD / GitHub Advisory
漏洞预警2026-10-31 发布MEDIUM
CVE-2026-90960
The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,
来源摘录 · NVD / GitHub Advisory