CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-110813

    🚨 CVE-2026-110813 The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not properly sanitize a stored field definition that can...

  • CVE-2026-110955

    🚨 CVE-2026-110955 The Wurdey WordPress plugin through 1.0.0 does not verify a request signature before logging a user in, allowing unauthenticated...

  • CVE-2026-113584

    🚨 CVE-2026-113584 The placester WordPress plugin through 1.4.3 does not perform any capability, nonce or ownership check on an AJAX action that...

  • CVE-2026-113615

    🚨 CVE-2026-113615 The GS JWT Authentication for WP REST API WordPress plugin through 1.0.0 does not sanitize or parameterize a request value...

  • CVE-2026-114427

    🚨 CVE-2026-114427 The GutenKit WordPress plugin before 2.5.5 does not properly sanitize custom CSS saved against a post before printing it inside...

  • CVE-2026-115230

    🚨 CVE-2026-115230 The WHIZZ WordPress plugin through 1.1.8 does not validate the password-reset key before updating a user's password, relying...

  • CVE-2026-115673

    🚨 CVE-2026-115673 The Anti-Spam, Spam FireWall by CleanTalk WordPress plugin before 6.91 does not escape a commenter-supplied value before...

  • CVE-2026-116533

    🚨 CVE-2026-116533 The Static Snapshot WordPress plugin through 0.2.1 does not sanitise shell metacharacters in a user-supplied value before...

  • CVE-2026-118045

    🚨 CVE-2026-118045 The Ever Accounting WordPress plugin before 2.3.3 does not restrict the file path supplied to its CSV import routine to an...

  • CVE-2026-118167

    🚨 CVE-2026-118167 The MC4WP: Mailchimp for WordPress plugin before 4.15.0 does not validate that the Mailchimp audience a sign-up form or bundled...

  • CVE-2026-118186

    🚨 CVE-2026-118186 The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not...

  • CVE-2026-118187

    🚨 CVE-2026-118187 The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not...

  • CVE-2026-118188

    🚨 CVE-2026-118188 The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not...

  • CVE-2026-118239

    🚨 CVE-2026-118239 The AutomatorWP WordPress plugin before 6.0.7 does not check that the user completing its Zoom and AWeber integration...

  • CVE-2026-119259

    🚨 CVE-2026-119259 The All-in-One Video Gallery WordPress plugin before 5.1.0 does not check the type, status or ownership of the target post...

  • CVE-2026-120408

    🚨 CVE-2026-120408 The All-in-One Video Gallery WordPress plugin before 5.1.0 does not escape a video's stored thumbnail URL before outputting it...

  • CVE-2026-12967

    🚨 CVE-2026-12967 The WCFM Membership WordPress plugin before 2.12.1 does not verify that payment was made before completing a paid membership...

  • CVE-2026-86606

    🚨 CVE-2026-86606 The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more WordPress plugin before 3.13.7 does not properly escape...

Статистика статей

Статьи
53,082
Просмотры
228,155
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху