CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112858

    🚨 CVE-2026-112858 Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issue affects Rhodos...

  • CVE-2026-112859

    🚨 CVE-2026-112859 Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-birdies allows Object Injection.This...

  • CVE-2026-112863

    🚨 CVE-2026-112863 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hogash KALLYAS kallyas...

  • CVE-2026-115931

    🚨 CVE-2026-115931 Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict...

  • CVE-2026-105199

    🚨 CVE-2026-105199 The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.3 does not perform a capability check in one of its AJAX...

  • CVE-2026-107887

    🚨 CVE-2026-107887 The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that...

  • CVE-2026-107907

    🚨 CVE-2026-107907 The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check when handling its front-end...

  • CVE-2026-110956

    🚨 CVE-2026-110956 The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine second factor before...

  • CVE-2026-112207

    🚨 CVE-2026-112207 The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link belongs to the site before...

  • CVE-2026-113489

    🚨 CVE-2026-113489 The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing being...

  • CVE-2026-113490

    🚨 CVE-2026-113490 The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check when rendering a listing's...

  • CVE-2026-113491

    🚨 CVE-2026-113491 The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local file...

  • CVE-2026-113492

    🚨 CVE-2026-113492 The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading listings for...

  • CVE-2026-113493

    🚨 CVE-2026-113493 The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attributes before...

  • CVE-2026-113673

    🚨 CVE-2026-113673 The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a...

  • CVE-2026-113674

    🚨 CVE-2026-113674 The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by logged-out users...

  • CVE-2026-87835

    🚨 CVE-2026-87835 The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may set when registering...

  • CVE-2026-97352

    🚨 CVE-2026-97352 The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX actions...

Статистика статей

Статьи
53,088
Просмотры
263,320
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху