Статьи Support
🚨 CVE-2026-42655
Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP <= 4.6.19 versions.
🚨 CVE-2026-42656
Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions.
🚨 CVE-2026-42657
Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions.
🚨 CVE-2026-42658
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions.
🚨 CVE-2026-42659
Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions.
🚨 CVE-2026-42660
Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions.
🚨 CVE-2026-42661
Custom role Path Traversal in WP Customer Area <= 8.3.4 versions.
🚨 CVE-2026-42662
Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions.
🚨 CVE-2026-42663
Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.
🚨 CVE-2026-42664
Unauthenticated Broken Access Control in AI Product Search for WooCommerce – Motive Commerce Search <= 1.38.2 versions.
🚨 CVE-2026-42665
Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.
🚨 CVE-2026-42666
Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions.
🚨 CVE-2026-42668
Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions.
🚨 CVE-2026-42688
Subscriber Cross Site Scripting (XSS) in Modula Image Gallery <= 2.14.23 versions.
🚨 CVE-2026-42743
Unauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions.
🚨 CVE-2026-42752
Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions.
🚨 CVE-2026-42775
Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions.
🚨 CVE-2026-45439
Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions.
🚨 CVE-2026-45441
Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions.
🚨 CVE-2026-47261
Wasmtime is a runtime for WebAssembly. In versions prior to 24.0.9, 36.0.10, and 44.0.2, when a filesystem preopen is given DirPerms::all() and FilePerms::READ without FilePerms::WRITE, this access control mechanism can be bypassed via the wasip2 descriptor.open-at or wasip1...
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.