Статьи Support
🚨 CVE-2026-116851
Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions.
🚨 CVE-2026-116852
Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions.
🚨 CVE-2026-116853
Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions.
🚨 CVE-2026-116854
Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.
🚨 CVE-2026-116861
Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions.
🚨 CVE-2026-116862
Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions.
🚨 CVE-2026-118086
Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.
🚨 CVE-2026-118089
Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions.
🚨 CVE-2026-118090
Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions.
🚨 CVE-2026-119117
Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application...
🚨 CVE-2026-119526
Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection.
This issue affects Royal Event: from n/a through 2.0.
🚨 CVE-2026-27061
Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions.
🚨 CVE-2026-28160
Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.10 versions.
🚨 CVE-2026-39732
Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions.
🚨 CVE-2026-39734
Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.
🚨 CVE-2026-39738
Unauthenticated PHP Object Injection in FunnelKit Automations <= 3.8.6.1 versions.
🚨 CVE-2026-39786
Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions.
🚨 CVE-2026-46560
Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `RADIUS` authentication module opens an unconnected datagram socket and trusts the first UDP datagram received on the client source port. The receive path does not verify the source IP and...
🚨 CVE-2026-48201
Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions.
🚨 CVE-2026-52710
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GIFTiT – Free Gifts for WooCommerce ithemeland-free-gifts-for-woo allows Code Injection.This issue affects GIFTiT – Free Gifts for WooCommerce: from n/a...
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.