CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-118584

    🚨 CVE-2026-118584 Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Permissions...

  • CVE-2026-118583

    🚨 CVE-2026-118583 Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Permissions...

  • CVE-2025-15702

    🚨 CVE-2025-15702 The Cloud Blocks WordPress plugin through 1.1.8 does not perform any authorisation or sanitisation when storing block asset URLs...

  • CVE-2026-100144

    🚨 CVE-2026-100144 The IVPAY payments WordPress plugin through 1.0.8 does not sanitise a value from its payment callback before using it in a SQL...

  • CVE-2026-105259

    🚨 CVE-2026-105259 The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise SVG files, which it adds to the list of file types that...

  • CVE-2026-105971

    🚨 CVE-2026-105971 The Car Dealer (Dealership) and Vehicle sales WordPress plugin through 4.73 does not restrict its unauthenticated single-listing...

  • CVE-2026-107773

    🚨 CVE-2026-107773 The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not correctly verify...

  • CVE-2025-15701

    🚨 CVE-2025-15701 The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise and escape some of its settings before outputting them on...

  • CVE-2026-107774

    🚨 CVE-2026-107774 The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not use a trusted...

  • CVE-2026-107775

    🚨 CVE-2026-107775 The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not verify that the acting...

  • CVE-2026-107786

    🚨 CVE-2026-107786 The CatFolders WordPress plugin before 2.5.7 does not properly sanitize and escape a user-controlled sort setting before using...

  • CVE-2026-107787

    🚨 CVE-2026-107787 The CatFolders WordPress plugin before 2.5.7 does not have authorisation checks on a folder maintenance action, allowing users...

  • CVE-2026-109150

    🚨 CVE-2026-109150 The WP PageNavi Style WordPress plugin through 1.4 does not sanitise and escape some of its settings, and has no CSRF check when...

  • CVE-2026-16304

    🚨 CVE-2026-16304 The WP Event Manager WordPress plugin before 3.4.2 does not properly validate ownership or the type of the user-supplied post...

  • CVE-2026-19256

    🚨 CVE-2026-19256 The All In One Login WordPress plugin before 2.5.0 does not adequately restrict the number of attempts that can be made against...

  • CVE-2026-85346

    🚨 CVE-2026-85346 The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform authorization or CSRF checks on several of...

  • CVE-2026-85347

    🚨 CVE-2026-85347 The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not sanitize and escape a user-supplied value before...

  • CVE-2026-85351

    🚨 CVE-2026-85351 The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not validate a user-supplied URL before performing a...

Статистика статей

Статьи
53,084
Просмотры
238,885
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху