Статьи Support
🚨 CVE-2026-40722
Missing Authorization vulnerability in Yoast BV Yoast SEO Premium allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Yoast SEO Premium: from n/a through 26.6.
🚨 CVE-2026-40723
Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions.
🚨 CVE-2026-40726
Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.14 versions.
🚨 CVE-2026-40736
Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions.
🚨 CVE-2026-40739
Unauthenticated PHP Object Injection in LuxeDrive <= 1.4 versions.
🚨 CVE-2026-40746
Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions.
🚨 CVE-2026-40747
Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions.
🚨 CVE-2026-40748
Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions.
🚨 CVE-2026-40749
Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions.
🚨 CVE-2026-40755
Unauthenticated PHP Object Injection in TechLink <= 1.3 versions.
🚨 CVE-2026-40758
Unauthenticated PHP Object Injection in Léonie <= 1.2.1 versions.
🚨 CVE-2026-40759
Unauthenticated PHP Object Injection in Esmée <= 1.4 versions.
🚨 CVE-2026-40760
Unauthenticated PHP Object Injection in Behold <= 1.5 versions.
🚨 CVE-2026-40761
Unauthenticated PHP Object Injection in Valeska <= 1.2.2 versions.
🚨 CVE-2026-40768
Unauthenticated Insecure Direct Object References (IDOR) in Salon booking system <= 10.30.24 versions.
🚨 CVE-2026-41280
Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects
This issue affects Apache DolphinScheduler versions prior to 3.4.2.
Users are recommended to upgrade to version 3.4.2, which fixes this issue.
🚨 CVE-2026-42357
Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access.
This issue affects Apache DolphinScheduler versions prior to 3.4.2.
Users are recommended to upgrade to version 3.4.2, which...
🚨 CVE-2026-45436
Subscriber Broken Access Control in WPBakery Page Builder <= 8.7.2 versions.
🚨 CVE-2026-48783
Postiz is an AI social media scheduling tool. Versions prior to 2.21.8 contained an unauthenticated endpoint that accepted a signed token and applied subscription-enforcement side effects to the organization referenced in that token's claims, without verifying the token's...
🚨 CVE-2026-48869
Unauthenticated Cross Site Scripting (XSS) in Enfold <= 7.1.4 versions.
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.