CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-86442

    🚨 CVE-2026-86442 The WP Event Manager WordPress plugin before 3.4.2 does not verify the ownership or the post type of a user supplied post...

  • CVE-2026-86795

    🚨 CVE-2026-86795 The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks in one of its AJAX actions...

  • CVE-2026-87856

    🚨 CVE-2026-87856 The Subscriptions for WooCommerce WordPress plugin before 2.1.1 only enforces its membership content restrictions on standard...

  • CVE-2026-88814

    🚨 CVE-2026-88814 The YITH WooCommerce Gift Cards WordPress plugin before 4.38.1 does not lock or atomically update a gift card's balance when it...

  • CVE-2026-90963

    🚨 CVE-2026-90963 The Essential Real Estate WordPress plugin before 5.3.5 does not perform any authorization or publication-status check in one of...

  • CVE-2026-90964

    🚨 CVE-2026-90964 The Essential Real Estate WordPress plugin before 5.3.5 does not restrict the recipient of one of its contact email actions...

  • CVE-2026-90965

    🚨 CVE-2026-90965 The Essential Real Estate WordPress plugin before 5.3.5 does not perform a publication-status or authorization check in two of...

  • CVE-2026-90966

    🚨 CVE-2026-90966 The Essential Real Estate WordPress plugin before 5.3.5 does not verify, in one of its AJAX actions, that a listing package...

  • CVE-2026-90967

    🚨 CVE-2026-90967 The Essential Real Estate WordPress plugin before 5.3.5 does not verify ownership of an invoice before rendering it in one of its...

  • CVE-2026-91049

    🚨 CVE-2026-91049 The EWWW Image Optimizer WordPress plugin before 8.9.1 does not properly sanitize and restrict a value in post content before...

  • CVE-2026-89142

    🚨 CVE-2026-89142 In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of...

  • CVE-2026-110525

    🚨 CVE-2026-110525 The MCB WordPress plugin through 1.0.0 does not sanitise or escape request header values before storing them and later rendering...

  • CVE-2026-110532

    🚨 CVE-2026-110532 The Mail Mage WordPress plugin through 0.0.25 does not properly sanitise and escape a user-supplied value before using it in a...

  • CVE-2026-110813

    🚨 CVE-2026-110813 The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not properly sanitize a stored field definition that can...

  • CVE-2026-110955

    🚨 CVE-2026-110955 The Wurdey WordPress plugin through 1.0.0 does not verify a request signature before logging a user in, allowing unauthenticated...

  • CVE-2026-113584

    🚨 CVE-2026-113584 The placester WordPress plugin through 1.4.3 does not perform any capability, nonce or ownership check on an AJAX action that...

  • CVE-2026-113615

    🚨 CVE-2026-113615 The GS JWT Authentication for WP REST API WordPress plugin through 1.0.0 does not sanitize or parameterize a request value...

  • CVE-2026-114427

    🚨 CVE-2026-114427 The GutenKit WordPress plugin before 2.5.5 does not properly sanitize custom CSS saved against a post before printing it inside...

Статистика статей

Статьи
53,084
Просмотры
238,885
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху