CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-115998

    🚨 CVE-2026-115998 IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept...

  • CVE-2026-111955

    🚨 CVE-2026-111955 The WholesaleX WordPress plugin before 3.0.9 does not check that a stored account confirmation code is set before comparing it...

  • CVE-2026-111956

    🚨 CVE-2026-111956 The WholesaleX WordPress plugin before 3.0.9 does not protect or remove the user-import file it keeps in a publicly accessible...

  • CVE-2026-111957

    🚨 CVE-2026-111957 The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not bind the payment it confirms with the provider...

  • CVE-2026-15261

    🚨 CVE-2026-15261 The TI WooCommerce Wishlist WordPress plugin before 2.13.0 does not enforce the same owner-only access control on its REST API...

  • CVE-2026-71195

    🚨 CVE-2026-71195 In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share...

  • CVE-2026-79627

    🚨 CVE-2026-79627 The Advanced File Manager WordPress plugin before 6.0.0 does not correctly determine whether a stored file is an SVG before...

  • CVE-2026-81812

    🚨 CVE-2026-81812 The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize uploaded SVG files on every upload route, allowing...

  • CVE-2026-81813

    🚨 CVE-2026-81813 The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize the text content of SVG files, checking only their...

  • CVE-2026-85642

    🚨 CVE-2026-85642 The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it...

  • CVE-2026-86611

    🚨 CVE-2026-86611 The Download Manager WordPress plugin before 3.3.71, Download Manager WordPress plugin before 7.5.9 does not have CSRF checks in...

  • CVE-2026-87838

    🚨 CVE-2026-87838 The Wava Payment Plugin WordPress plugin before 0.3.10 does not perform any authorisation, nonce or origin verification on one of...

  • CVE-2026-88784

    🚨 CVE-2026-88784 The Translate WordPress with Weglot 2.0 WordPress plugin before 6.4.3 does not escape the URLs it re-inserts into a page when...

  • CVE-2026-92997

    🚨 CVE-2026-92997 The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not properly validate a parameter before using it...

  • CVE-2026-92998

    🚨 CVE-2026-92998 The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a...

  • CVE-2026-92999

    🚨 CVE-2026-92999 The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not perform any authorization check on a...

  • CVE-2026-93856

    🚨 CVE-2026-93856 In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the...

  • CVE-2026-96901

    🚨 CVE-2026-96901 The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.2.0 does not verify the integrity of its cart-recovery...

Статистика статей

Статьи
53,087
Просмотры
256,406
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху