CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-111942

    🚨 CVE-2026-111942 A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0. Impacted is an unknown function of the file...

  • CVE-2026-87844

    🚨 CVE-2026-87844 The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its...

  • CVE-2026-96534

    🚨 CVE-2026-96534 The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not...

  • CVE-2026-110981

    🚨 CVE-2026-110981 The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before...

  • CVE-2026-110070

    🚨 CVE-2026-110070 The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the target post...

  • CVE-2026-111041

    🚨 CVE-2026-111041 The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management actions owns or...

  • CVE-2026-107436

    🚨 CVE-2026-107436 Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This...

  • CVE-2026-108485

    🚨 CVE-2026-108485 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill eStore estore...

  • CVE-2026-109894

    🚨 CVE-2026-109894 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics...

  • CVE-2026-109895

    🚨 CVE-2026-109895 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics Booktics...

  • CVE-2026-110365

    🚨 CVE-2026-110365 Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows Exploiting Incorrectly...

  • CVE-2026-110372

    🚨 CVE-2026-110372 Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue...

  • CVE-2026-110373

    🚨 CVE-2026-110373 Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege...

  • CVE-2026-110382

    🚨 CVE-2026-110382 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NSquared Simply Schedule...

  • CVE-2026-110383

    🚨 CVE-2026-110383 Authorization Bypass Through User-Controlled Key vulnerability in WP E-Signature Electronic Signature Add-on for Fluent Forms...

  • CVE-2026-110880

    🚨 CVE-2026-110880 Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured Access...

  • CVE-2026-110883

    🚨 CVE-2026-110883 Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat...

  • CVE-2026-110885

    🚨 CVE-2026-110885 Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Code...

Статистика статей

Статьи
53,082
Просмотры
200,099
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху