CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-12368

    🚨 CVE-2025-12368 The Sermon Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `sermon-views` shortcode in all...

  • CVE-2025-12370

    🚨 CVE-2025-12370 The Takeads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.0.13. This is due...

  • CVE-2025-13144

    🚨 CVE-2025-13144 The ContentStudio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.7...

  • CVE-2025-13360

    🚨 CVE-2025-13360 The Quantic Social Image Hover plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and...

  • CVE-2025-13512

    🚨 CVE-2025-13512 The CoSign Single Signon plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']`...

  • CVE-2025-13528

    🚨 CVE-2025-13528 The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability...

  • CVE-2025-13621

    🚨 CVE-2025-13621 The dream gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0...

  • CVE-2025-13622

    🚨 CVE-2025-13622 The Jabbernotification plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all...

  • CVE-2025-13623

    🚨 CVE-2025-13623 The Twitscription plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all...

  • CVE-2025-13860

    🚨 CVE-2025-13860 The Easy Jump Links Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `h_tags` parameter in all...

  • CVE-2025-32900

    🚨 CVE-2025-32900 In the KDE Connect information-exchange protocol before 2025-04-18, a packet can be crafted to temporarily change the displayed...

  • CVE-2025-66270

    🚨 CVE-2025-66270 The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before...

  • CVE-2025-12093

    🚨 CVE-2025-12093 The Voidek Employee Portal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several...

  • CVE-2025-12186

    🚨 CVE-2025-12186 The Weekly Planner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to...

  • CVE-2025-12354

    🚨 CVE-2025-12354 The Live CSS Preview plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on...

  • CVE-2025-12355

    🚨 CVE-2025-12355 The Payaza plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the...

  • CVE-2025-12373

    🚨 CVE-2025-12373 The Torod – The smart shipping and delivery portal for e-shops and retailers plugin for WordPress is vulnerable to Cross-Site...

  • CVE-2025-12374

    🚨 CVE-2025-12374 The Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification plugin for...

Статистика статей

Статьи
53,082
Просмотры
195,627
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху