CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-107127

    🚨 CVE-2026-107127 The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not validate the origin of a password-reset request...

  • CVE-2026-107128

    🚨 CVE-2026-107128 The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the acting user is permitted to manage the...

  • CVE-2026-107237

    🚨 CVE-2026-107237 The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.28 does not perform capability or nonce checks on the...

  • CVE-2026-107506

    🚨 CVE-2026-107506 The Simple Banner WordPress plugin before 3.3.3 does not correctly limit the capabilities it grants to the user roles an...

  • CVE-2026-107788

    🚨 CVE-2026-107788 The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when deleting shipping label records...

  • CVE-2026-107789

    🚨 CVE-2026-107789 The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when serving shipping label downloads...

  • CVE-2026-107790

    🚨 CVE-2026-107790 The HireZoot WordPress plugin before 4.1.1 does not sanitise and escape some of its stored data before outputting it in the...

  • CVE-2026-108073

    🚨 CVE-2026-108073 The SureCart WordPress plugin before 4.9.5 does not restrict which related objects an anonymous visitor may include when reading...

  • CVE-2026-109926

    🚨 CVE-2026-109926 The Productive Commerce WordPress plugin before 1.1.49 does not perform a capability check in one of its AJAX actions and...

  • CVE-2026-110514

    🚨 CVE-2026-110514 The WPZOOM Portfolio Lite WordPress plugin before 1.4.34 does not check that a user is allowed to edit a post before changing...

  • CVE-2026-110523

    🚨 CVE-2026-110523 The WP User Manager WordPress plugin before 2.9.26 does not keep its paid-registration capability restrictions in force once the...

  • CVE-2026-110651

    🚨 CVE-2026-110651 The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a value before using it in a...

  • CVE-2026-110982

    🚨 CVE-2026-110982 The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit the targeted object before...

  • CVE-2026-111574

    🚨 CVE-2026-111574 The Redirection for Contact Form 7 WordPress plugin before 3.2.12 does not sanitise or escape submitted form data stored as lead...

  • CVE-2026-111596

    🚨 CVE-2026-111596 The Kliken: Ads + Pixel for Meta WordPress plugin before 1.2.3 does not verify that a visitor holds an order's key before...

  • CVE-2026-111947

    🚨 CVE-2026-111947 The Pricing Table WordPress Plugin WordPress plugin before 4.1.3 does not perform authorisation checks when duplicating a legacy...

  • CVE-2026-111948

    🚨 CVE-2026-111948 The User Profile Builder WordPress plugin before 4.0.1 does not escape the current page URL before outputting it in a JavaScript...

  • CVE-2026-111949

    🚨 CVE-2026-111949 The miniOrange 2FA WordPress plugin before 6.3.1 does not prevent a pending passkey login from registering an additional passkey...

Статистика статей

Статьи
53,087
Просмотры
256,406
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху