CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-107124

    🚨 CVE-2026-107124 A flaw was found in the OIDC logout endpoint of the keycloak-services component, which handles user session termination in Red...

  • CVE-2026-109081

    🚨 CVE-2026-109081 A flaw was found in Keycloak. The Dynamic Client Registration (DCR) endpoint does not properly validate authorization when...

  • CVE-2026-110525

    🚨 CVE-2026-110525 The MCB WordPress plugin through 1.0.0 does not sanitise or escape request header values before storing them and later rendering...

  • CVE-2026-110532

    🚨 CVE-2026-110532 The Mail Mage WordPress plugin through 0.0.25 does not properly sanitise and escape a user-supplied value before using it in a...

  • CVE-2026-110813

    🚨 CVE-2026-110813 The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not properly sanitize a stored field definition that can...

  • CVE-2026-110955

    🚨 CVE-2026-110955 The Wurdey WordPress plugin through 1.0.0 does not verify a request signature before logging a user in, allowing unauthenticated...

  • CVE-2026-113584

    🚨 CVE-2026-113584 The placester WordPress plugin through 1.4.3 does not perform any capability, nonce or ownership check on an AJAX action that...

  • CVE-2026-113615

    🚨 CVE-2026-113615 The GS JWT Authentication for WP REST API WordPress plugin through 1.0.0 does not sanitize or parameterize a request value...

  • CVE-2026-114427

    🚨 CVE-2026-114427 The GutenKit WordPress plugin before 2.5.5 does not properly sanitize custom CSS saved against a post before printing it inside...

  • CVE-2026-115230

    🚨 CVE-2026-115230 The WHIZZ WordPress plugin through 1.1.8 does not validate the password-reset key before updating a user's password, relying...

  • CVE-2026-115673

    🚨 CVE-2026-115673 The Anti-Spam, Spam FireWall by CleanTalk WordPress plugin before 6.91 does not escape a commenter-supplied value before...

  • CVE-2026-116533

    🚨 CVE-2026-116533 The Static Snapshot WordPress plugin through 0.2.1 does not sanitise shell metacharacters in a user-supplied value before...

  • CVE-2026-118045

    🚨 CVE-2026-118045 The Ever Accounting WordPress plugin before 2.3.3 does not restrict the file path supplied to its CSV import routine to an...

  • CVE-2026-118167

    🚨 CVE-2026-118167 The MC4WP: Mailchimp for WordPress plugin before 4.15.0 does not validate that the Mailchimp audience a sign-up form or bundled...

  • CVE-2026-118186

    🚨 CVE-2026-118186 The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not...

  • CVE-2026-118188

    🚨 CVE-2026-118188 The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not...

  • CVE-2026-118239

    🚨 CVE-2026-118239 The AutomatorWP WordPress plugin before 6.0.7 does not check that the user completing its Zoom and AWeber integration...

  • CVE-2026-118639

    🚨 CVE-2026-118639 The Surfer WordPress plugin before 1.8.1.759 discloses a sensitive API credential to low-privileged users through the post...

Статистика статей

Статьи
53,084
Просмотры
240,345
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху