CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-96660

    🚨 CVE-2026-96660 The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User...

  • CVE-2026-103376

    🚨 CVE-2026-103376 The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) WordPress...

  • CVE-2026-104122

    🚨 CVE-2026-104122 The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using it in a SQL query, allowing...

  • CVE-2026-104246

    🚨 CVE-2026-104246 The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 does not sanitize a signature field value before building an...

  • CVE-2026-106470

    🚨 CVE-2026-106470 The WP Data Access WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in one of its actions, allowing...

  • CVE-2026-110527

    🚨 CVE-2026-110527 The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated...

  • CVE-2026-81343

    🚨 CVE-2026-81343 The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability check on one of its...

  • CVE-2026-81344

    🚨 CVE-2026-81344 The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP classes may be instantiated...

  • CVE-2026-91074

    🚨 CVE-2026-91074 The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL...

  • CVE-2026-92431

    🚨 CVE-2026-92431 The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing...

  • CVE-2026-92432

    🚨 CVE-2026-92432 The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing...

  • CVE-2026-92433

    🚨 CVE-2026-92433 The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing...

  • CVE-2026-97314

    🚨 CVE-2026-97314 The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its link...

  • CVE-2026-100316

    🚨 CVE-2026-100316 The European VAT Compliance Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...

  • CVE-2026-109983

    🚨 CVE-2026-109983 The YMC Filter plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'post_title' parameter in all...

  • CVE-2026-110253

    🚨 CVE-2026-110253 The weForms – Easy Drag & Drop Contact Form Builder For WordPress plugin for WordPress is vulnerable to limited media file...

  • CVE-2026-111110

    🚨 CVE-2026-111110 The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Stored Cross-Site...

  • CVE-2026-110889

    🚨 CVE-2026-110889 Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve...

Статистика статей

Статьи
53,082
Просмотры
200,099
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху