Статьи Support
🚨 CVE-2026-66472
Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.
🚨 CVE-2026-66653
Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions.
🚨 CVE-2026-66654
Subscriber Server Side Request Forgery (SSRF) in Vehica Core <= 1.0.104 versions.
🚨 CVE-2026-66655
Unauthenticated Cross Site Scripting (XSS) in MultiParcels Shipping For WooCommerce <= 1.30.36 versions.
🚨 CVE-2026-66656
Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions.
🚨 CVE-2026-66657
Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions.
🚨 CVE-2026-66658
Subscriber SQL Injection in Reviewer <= 3.14.2 versions.
🚨 CVE-2026-66660
Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on <= 2.5.1 versions.
🚨 CVE-2026-66661
Subscriber Privilege Escalation in Directories Pro <= 2.0.5 versions.
🚨 CVE-2026-66687
Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.
🚨 CVE-2026-66689
Unauthenticated Broken Access Control in Anti Spam and list cleaner – AcyChecker <= 2.0.0 versions.
🚨 CVE-2026-66691
Unauthenticated Broken Access Control in Nokri <= 1.6.6 versions.
🚨 CVE-2026-66693
Subscriber Broken Access Control in Motors <= 1.4.113 versions.
🚨 CVE-2026-66697
Unauthenticated Cross Site Scripting (XSS) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions.
🚨 CVE-2026-66698
Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions.
🚨 CVE-2026-66700
Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions.
🚨 CVE-2026-66704
Unauthenticated Server Side Request Forgery (SSRF) in Gutenverse Companion <= 2.5.1 versions.
🚨 CVE-2026-49820
Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Probo's `saferedirect` package validates redirect URLs used across authentication flows (OIDC, SAML, session transfer, OAuth connectors, and trust-center magic...
🚨 CVE-2026-49856
@jshookmcp/jshook is an MCP server that gives AI agents tools for JavaScript analysis and security research. In version 0.3.1, he network domain has a central SSRF authorization policy that blocks private, loopback, link-local, and reserved targets unless an explicit...
🚨 CVE-2026-49857
auth-fetch-mcp is an MCP server that lets AI assistants fetch content from authenticated web pages. Version 3.0.1 implements SSRF protection in `assertSafeUrl()` (`src/security.ts`) to block requests to private and loopback addresses. However, the `isPrivateV6()` function fails...
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.