CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-97785

    🚨 CVE-2026-97785 Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2025-15705

    🚨 CVE-2025-15705 The Contact Form by Supsystic WordPress plugin before 1.8.0 does not sanitise and escape a form name, allowing users with access...

  • CVE-2026-110285

    🚨 CVE-2026-110285 The WP Stripe Checkout WordPress plugin before 1.2.2.62 does not verify the Stripe webhook signature when no signing secret is...

  • CVE-2026-111976

    🚨 CVE-2026-111976 The GiveWP WordPress plugin before 4.19.0.1 does not perform any status or capability check when rendering a donation form on a...

  • CVE-2026-111978

    🚨 CVE-2026-111978 The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied filename before reading it from disk...

  • CVE-2026-111979

    🚨 CVE-2026-111979 The GiveWP WordPress plugin before 4.19.0.1 does not properly sanitise and escape one of its donation form template settings...

  • CVE-2026-111980

    🚨 CVE-2026-111980 The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies to...

  • CVE-2026-111981

    🚨 CVE-2026-111981 The GiveWP WordPress plugin before 4.19.0.1 does not perform a capability check when handling donor address changes, allowing...

  • CVE-2026-114740

    🚨 CVE-2026-114740 The WPVR WordPress plugin before 9.1.3 does not correctly check user capabilities when creating a tour through its setup wizard...

  • CVE-2026-114741

    🚨 CVE-2026-114741 The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating virtual...

  • CVE-2026-114742

    🚨 CVE-2026-114742 The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating virtual tours, allowing...

  • CVE-2026-114743

    🚨 CVE-2026-114743 The InstaWP Connect WordPress plugin before 0.1.4.2 does not perform a capability check on its InstaWP Connect WordPress plugin...

  • CVE-2026-115183

    🚨 CVE-2026-115183 The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a widget's heading text after decoding...

  • CVE-2026-115214

    🚨 CVE-2026-115214 The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request...

  • CVE-2026-115251

    🚨 CVE-2026-115251 The Duplicator WordPress plugin before 5.0.0 does not restrict its one-click upgrade routine to users allowed to install...

  • CVE-2026-94295

    🚨 CVE-2026-94295 The Chikkili- Google Pay India for Woocommerce WordPress plugin through 1.0.6 does not verify that a payment notification...

  • CVE-2026-103298

    🚨 CVE-2026-103298 The CCAvenue Payment Gateway for WooCommerce WordPress plugin through 3.1 does not verify that a payment-confirmation request...

  • CVE-2026-103306

    🚨 CVE-2026-103306 The Online Payments with iK Pay Gateway WordPress plugin before 3.0.4 does not properly verify the authenticity of its payment...

Статистика статей

Статьи
53,101
Просмотры
291,400
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху