The Tripzzy WordPress plugin before 1.5.1 does not perform any capability or ownership checks on...
CVE-2026-87840
The Tripzzy WordPress plugin before 1.5.1 does not perform any capability or ownership checks on its administrative boo
#severity:medium
共收录 5477 条相关情报。
← 返回所有主题The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its...
CVE-2026-14844
The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This...
CVE-2026-93959
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown
Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent...
CVE-2026-94057
Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead dep
A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management...
CVE-2026-94001
A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The endpoint
A flaw was found in the OIDC protocol implementation of Keycloak, an open-source identity and...
CVE-2026-93999
A flaw was found in the OIDC protocol implementation of Keycloak, an open-source identity and access management solution
A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management...
CVE-2026-94000
A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue oc
OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL...
CVE-2026-93982
OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameters to plain
rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve...
CVE-2026-93987
rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve docker` volume plugin.
OpenPanel through commit bad75bdd fails to escape property keys in ClickHouse SQL queries,...
CVE-2026-93983
OpenPanel through commit bad75bdd fails to escape property keys in ClickHouse SQL queries, allowing authenticated users
OpenPanel tracking API through commit bad75bddc74d12d36cfb843f4531d3b830a8d994 fails to verify...
CVE-2026-93984
OpenPanel tracking API through commit bad75bddc74d12d36cfb843f4531d3b830a8d994 fails to verify client secret cryptograph
The Datalogics Ecommerce Delivery – Datalogics plugin for WordPress is vulnerable to...
CVE-2026-9613
The Datalogics Ecommerce Delivery – Datalogics plugin for WordPress is vulnerable to authorization bypass in all version
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open...
CVE-2026-7527
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open Redirect in all version
The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper...
CVE-2026-9832
The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper Verification of Cryptograph
The TikTok plugin for WordPress is vulnerable to authorization bypass in all versions up to, and...
CVE-2026-18346
The TikTok plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.1. This
The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all...
CVE-2026-9232
The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
CVE-2026-5410
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the spinner field in versions
The Gum Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-8354
The Gum Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pop_tag' paramete
The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive...
CVE-2026-9289
The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive Information Exposure in all versi
The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ...
CVE-2026-76579
The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'esi' parameter in all