CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-49071

    🚨 CVE-2026-49071 Unauthenticated Broken Authentication in WooCommerce Dropshipping <= 5.2.4 versions.

  • CVE-2026-49072

    🚨 CVE-2026-49072 Unauthenticated Broken Access Control in WooCommerce Anti-Fraud <= 7.2.6 versions.

  • CVE-2026-49073

    🚨 CVE-2026-49073 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpWax Directorist Booking...

  • CVE-2026-49074

    🚨 CVE-2026-49074 Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.9.1 versions.

  • CVE-2026-49075

    🚨 CVE-2026-49075 Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions.

  • CVE-2026-49076

    🚨 CVE-2026-49076 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine...

  • CVE-2026-49079

    🚨 CVE-2026-49079 Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions.

  • CVE-2026-49767

    🚨 CVE-2026-49767 Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions.

  • CVE-2026-49778

    🚨 CVE-2026-49778 Unauthenticated Cross Site Scripting (XSS) in WPFunnels Pro <= 2.9.4 versions.

  • CVE-2026-50203

    🚨 CVE-2026-50203 A path traversal in the SFTP provider (`SFTPHook.retrieve_directory` / `SFTPOperator(operation=get)`) let a malicious or...

  • CVE-2026-52696

    🚨 CVE-2026-52696 Unauthenticated Sensitive Data Exposure in JetBlog <= 2.4.8 versions.

  • CVE-2026-52698

    🚨 CVE-2026-52698 Subscriber Sensitive Data Exposure in PushEngage – Web Push Notifications, eCommerce Automation &amp; Chat Widget <= 4.2.3 versions.

  • CVE-2026-52705

    🚨 CVE-2026-52705 Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= 1.4.5 versions.

  • CVE-2026-53876

    🚨 CVE-2026-53876 RadiX AX6600 WiFi 6 Tri-Band Gaming Router contains an OS command injection vulnerability, which may lead to arbitrary command...

  • CVE-2026-54184

    🚨 CVE-2026-54184 Unauthenticated Insecure Direct Object References (IDOR) in Clean Login <= 1.15 versions.

  • CVE-2026-54186

    🚨 CVE-2026-54186 Unauthenticated SQL Injection in JobSearch <= 3.2.9 versions.

  • CVE-2026-54187

    🚨 CVE-2026-54187 Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions.

  • CVE-2026-54189

    🚨 CVE-2026-54189 Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.

Статистика статей

Статьи
53,101
Просмотры
290,437
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху