CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-121492

    🚨 CVE-2026-121492 The Fiber Admin WordPress plugin before 4.0.1 does not have authorisation checks in some of its AJAX actions, allowing...

  • CVE-2026-121796

    🚨 CVE-2026-121796 The Add From Server Lite WordPress plugin before 6.0.0 does not restrict SVG uploads to users allowed to post unfiltered HTML...

  • CVE-2026-121848

    🚨 CVE-2026-121848 The Magic Link WordPress plugin before 2.2.6 does not check that the user requesting a login link is authorised to generate one...

  • CVE-2026-121857

    🚨 CVE-2026-121857 The Event Tickets with Ticket Scanner WordPress plugin before 3.1.14 does not check that a user may manage WooCommerce orders...

  • CVE-2026-121858

    🚨 CVE-2026-121858 The Event Tickets with Ticket Scanner WordPress plugin before 3.2.9 does not properly escape a search value before using it in...

  • CVE-2026-121866

    🚨 CVE-2026-121866 The iLeads SMS Gateway by Exsile WordPress plugin before 2.0.0 does not check capabilities or nonces in several AJAX actions...

  • CVE-2026-122001

    🚨 CVE-2026-122001 The Komfortkasse for WooCommerce WordPress plugin before 1.4.9 does not properly validate the authenticity of REST API requests...

  • CVE-2026-97190

    🚨 CVE-2026-97190 The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not verify that a user is allowed to edit the target object...

  • CVE-2026-97191

    🚨 CVE-2026-97191 The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not re-apply its field-group location rules when persisting...

  • CVE-2023-34966

    🚨 CVE-2023-34966 An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets...

  • CVE-2023-5090

    🚨 CVE-2023-5090 A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic msrs when...

  • CVE-2023-5156

    🚨 CVE-2023-5156 A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result...

  • CVE-2023-52356

    🚨 CVE-2023-52356 A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the...

  • CVE-2026-103917

    🚨 CVE-2026-103917 The The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to arbitrary shortcode...

  • CVE-2026-115811

    🚨 CVE-2026-115811 The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'star_rating' parameter in all...

  • CVE-2026-116558

    🚨 CVE-2026-116558 The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...

  • CVE-2026-116621

    🚨 CVE-2026-116621 The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for...

  • CVE-2026-118048

    🚨 CVE-2026-118048 The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Simple Form autocomplete lookup...

Статистика статей

Статьи
53,082
Просмотры
222,786
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху