Статьи Support
🚨 CVE-2026-48875
Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions.
🚨 CVE-2026-48967
Subscriber SQL Injection in Geo Mashup <= 1.13.19 versions.
🚨 CVE-2026-49057
Unauthenticated Broken Access Control in JobSearch <= 3.2.7 versions.
🚨 CVE-2026-49058
Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions.
🚨 CVE-2026-49071
Unauthenticated Broken Authentication in WooCommerce Dropshipping <= 5.2.4 versions.
🚨 CVE-2026-49072
Unauthenticated Broken Access Control in WooCommerce Anti-Fraud <= 7.2.6 versions.
🚨 CVE-2026-49073
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpWax Directorist Booking allows Blind SQL Injection.
This issue affects Directorist Booking: from n/a through 3.0.3.
🚨 CVE-2026-49074
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.9.1 versions.
🚨 CVE-2026-49075
Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions.
🚨 CVE-2026-49076
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows Blind SQL Injection.This issue affects JetEngine: from n/a through 3.8.9.1.
🚨 CVE-2026-49079
Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions.
🚨 CVE-2026-49767
Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions.
🚨 CVE-2026-49778
Unauthenticated Cross Site Scripting (XSS) in WPFunnels Pro <= 2.9.4 versions.
🚨 CVE-2026-50203
A path traversal in the SFTP provider (`SFTPHook.retrieve_directory` / `SFTPOperator(operation=get)`) let a malicious or compromised remote SFTP server write files outside the configured local destination directory via crafted directory-entry names. No Airflow account is...
🚨 CVE-2026-52696
Unauthenticated Sensitive Data Exposure in JetBlog <= 2.4.8 versions.
🚨 CVE-2026-52698
Subscriber Sensitive Data Exposure in PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget <= 4.2.3 versions.
🚨 CVE-2026-52705
Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= 1.4.5 versions.
🚨 CVE-2026-53876
RadiX AX6600 WiFi 6 Tri-Band Gaming Router contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who logs in to the web console as an administrator.
🚨 CVE-2026-54184
Unauthenticated Insecure Direct Object References (IDOR) in Clean Login <= 1.15 versions.
🚨 CVE-2026-54186
Unauthenticated SQL Injection in JobSearch <= 3.2.9 versions.
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.