CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-15708

    🚨 CVE-2025-15708 The Live Composer WordPress plugin before 2.1.23 does not sanitise and escape some of its custom post type slug settings before...

  • CVE-2026-117525

    🚨 CVE-2026-117525 The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not escape shortcode attribute values embedded in...

  • CVE-2026-118530

    🚨 CVE-2026-118530 The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not check that the...

  • CVE-2026-118528

    🚨 CVE-2026-118528 The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not validate that...

  • CVE-2026-117588

    🚨 CVE-2026-117588 The WP Google Review Slider WordPress plugin before 18.11 does not perform nonce validation when updating its active Google...

  • CVE-2026-118529

    🚨 CVE-2026-118529 The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify that a...

  • CVE-2026-118533

    🚨 CVE-2026-118533 The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify that the...

  • CVE-2026-118534

    🚨 CVE-2026-118534 The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify that the...

  • CVE-2026-119073

    🚨 CVE-2026-119073 The Live Composer WordPress plugin before 2.1.23 does not escape a pagination setting supplied through its post-listing module...

  • CVE-2026-121379

    🚨 CVE-2026-121379 The Tournamatch WordPress plugin before 4.7.1 does not validate or restrict the path of a previously stored profile or team...

  • CVE-2026-121380

    🚨 CVE-2026-121380 The Tournamatch WordPress plugin before 4.7.1 does not restrict access to its team invitation listing, allowing unauthenticated...

  • CVE-2026-121491

    🚨 CVE-2026-121491 The Fiber Admin WordPress plugin before 4.0.1 does not validate or escape a request header before writing it into a PHP file it...

  • CVE-2026-121492

    🚨 CVE-2026-121492 The Fiber Admin WordPress plugin before 4.0.1 does not have authorisation checks in some of its AJAX actions, allowing...

  • CVE-2026-121796

    🚨 CVE-2026-121796 The Add From Server Lite WordPress plugin before 6.0.0 does not restrict SVG uploads to users allowed to post unfiltered HTML...

  • CVE-2026-121848

    🚨 CVE-2026-121848 The Magic Link WordPress plugin before 2.2.6 does not check that the user requesting a login link is authorised to generate one...

  • CVE-2026-121857

    🚨 CVE-2026-121857 The Event Tickets with Ticket Scanner WordPress plugin before 3.1.14 does not check that a user may manage WooCommerce orders...

  • CVE-2026-121858

    🚨 CVE-2026-121858 The Event Tickets with Ticket Scanner WordPress plugin before 3.2.9 does not properly escape a search value before using it in...

  • CVE-2026-121866

    🚨 CVE-2026-121866 The iLeads SMS Gateway by Exsile WordPress plugin before 2.0.0 does not check capabilities or nonces in several AJAX actions...

Статистика статей

Статьи
53,082
Просмотры
220,230
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху