CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-14163

    🚨 CVE-2025-14163 The Premium Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and...

  • CVE-2025-14388

    🚨 CVE-2025-14388 The PhastPress plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read via null byte injection in all versions...

  • CVE-2025-14548

    🚨 CVE-2025-14548 The Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'event_desc' parameter in all versions up...

  • CVE-2025-14000

    🚨 CVE-2025-14000 The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's...

  • CVE-2025-14635

    🚨 CVE-2025-14635 The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ha_page_custom_js'...

  • CVE-2025-59886

    🚨 CVE-2025-59886 Improper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could lead into an attacker with...

  • CVE-2025-68544

    🚨 CVE-2025-68544 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay...

  • CVE-2025-68546

    🚨 CVE-2025-68546 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay...

  • CVE-2025-68548

    🚨 CVE-2025-68548 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace Responsive...

  • CVE-2025-68550

    🚨 CVE-2025-68550 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme WPBulky...

  • CVE-2025-68551

    🚨 CVE-2025-68551 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vikas Ratudi VPSUForm v-form allows...

  • CVE-2025-68556

    🚨 CVE-2025-68556 Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly...

  • CVE-2025-68557

    🚨 CVE-2025-68557 Missing Authorization vulnerability in Vikas Ratudi Chakra test chakra-test allows Exploiting Incorrectly Configured Access...

  • CVE-2025-68559

    🚨 CVE-2025-68559 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme...

  • CVE-2025-68560

    🚨 CVE-2025-68560 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...

  • CVE-2025-68561

    🚨 CVE-2025-68561 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia AutomatorWP...

  • CVE-2025-13183

    🚨 CVE-2025-13183 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hotech Software Inc...

  • CVE-2025-33223

    🚨 CVE-2025-33223 NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges. A...

Статистика статей

Статьи
53,084
Просмотры
235,818
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху