Статьи Support
🚨 CVE-2026-48889
Subscriber Privilege Escalation in Amelia <= 2.3 versions.
🚨 CVE-2026-48965
Subscriber Sensitive Data Exposure in XCloner <= 4.8.6 versions.
🚨 CVE-2026-48966
Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions.
🚨 CVE-2026-48970
Unauthenticated Broken Authentication in Really Simple SSL <= 9.5.10 versions.
🚨 CVE-2026-49043
Unauthenticated Cross Site Request Forgery (CSRF) in WP Migrate Lite <= 2.7.8 versions.
🚨 CVE-2026-49055
Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.7 versions.
🚨 CVE-2026-49056
Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.9.4 versions.
🚨 CVE-2026-49061
Unauthenticated Arbitrary File Download in WPC Product Options for WooCommerce <= 3.2.1 versions.
🚨 CVE-2026-49063
Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions.
🚨 CVE-2026-49065
Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce <= 1.9.5 versions.
🚨 CVE-2026-49066
Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway <= 6.0.0 versions.
🚨 CVE-2026-49067
Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions.
🚨 CVE-2026-49068
Subscriber Sensitive Data Exposure in Coupon Affiliates <= 7.8.1 versions.
🚨 CVE-2026-49082
Subscriber Sensitive Data Exposure in Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons <= 1.4.8 versions.
🚨 CVE-2026-49085
Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 versions.
🚨 CVE-2026-49104
Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.2.1 versions.
🚨 CVE-2026-49105
Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 versions.
🚨 CVE-2026-49109
Unauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.4.3 versions.
🚨 CVE-2026-49110
Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce <= 3.1.4 versions.
🚨 CVE-2026-49112
Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions.
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.