CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-120408

    🚨 CVE-2026-120408 The All-in-One Video Gallery WordPress plugin before 5.1.0 does not escape a video's stored thumbnail URL before outputting it...

  • CVE-2026-12967

    🚨 CVE-2026-12967 The WCFM Membership WordPress plugin before 2.12.1 does not verify that payment was made before completing a paid membership...

  • CVE-2026-86606

    🚨 CVE-2026-86606 The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more WordPress plugin before 3.13.7 does not properly escape...

  • CVE-2026-87784

    🚨 CVE-2026-87784 The Cool Media Filter WordPress plugin through 1.0.1 does not perform any capability or nonce check when updating the...

  • CVE-2026-92396

    🚨 CVE-2026-92396 The ShopEngine Gutenberg WooCommerce Builder Blocks Addon WordPress plugin before 2.4.4 does not validate the user's capabilities...

  • CVE-2026-118166

    🚨 CVE-2026-118166 The MC4WP: Mailchimp for WordPress WordPress plugin before 4.15.0 does not prevent request-derived values in its dynamic content...

  • CVE-2026-118423

    🚨 CVE-2026-118423 The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its form submissions, allowing...

  • CVE-2026-121633

    🚨 CVE-2026-121633 The Order Tracking WordPress plugin before 3.6.0 does not verify that a PayPal payment notification was sent to the merchant's...

  • CVE-2026-121636

    🚨 CVE-2026-121636 The Quick Event Manager WordPress plugin before 9.19 does not verify the authenticity of PayPal payment notifications before...

  • CVE-2026-88799

    🚨 CVE-2026-88799 The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 do not check ownership or capability on the...

  • CVE-2026-88800

    🚨 CVE-2026-88800 The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 act on a role deletion request on every...

  • CVE-2026-88801

    🚨 CVE-2026-88801 The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 do not check a capability or a nonce before...

  • CVE-2025-66621

    🚨 CVE-2025-66621 Apache James SASL OAuthBearer/XOAUTH2 prior versions 3.9.1 fails to validate correctly AUD claim of JWT payloads when...

  • CVE-2026-103479

    🚨 CVE-2026-103479 The Pubjet | پاب‌جت plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.4.8. This...

  • CVE-2026-103908

    🚨 CVE-2026-103908 The The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to arbitrary shortcode execution in all...

  • CVE-2026-104010

    🚨 CVE-2026-104010 The WPSyncSheets For Contact Form 7 – CF7 Google Sheets Connector & Save to Database plugin for WordPress is vulnerable to...

  • CVE-2026-107622

    🚨 CVE-2026-107622 The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a...

  • CVE-2026-107658

    🚨 CVE-2026-107658 The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bf_post_type (and...

Статистика статей

Статьи
53,084
Просмотры
238,885
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху