CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-109150

    🚨 CVE-2026-109150 The WP PageNavi Style WordPress plugin through 1.4 does not sanitise and escape some of its settings, and has no CSRF check when...

  • CVE-2026-16304

    🚨 CVE-2026-16304 The WP Event Manager WordPress plugin before 3.4.2 does not properly validate ownership or the type of the user-supplied post...

  • CVE-2026-19256

    🚨 CVE-2026-19256 The All In One Login WordPress plugin before 2.5.0 does not adequately restrict the number of attempts that can be made against...

  • CVE-2026-85346

    🚨 CVE-2026-85346 The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform authorization or CSRF checks on several of...

  • CVE-2026-85347

    🚨 CVE-2026-85347 The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not sanitize and escape a user-supplied value before...

  • CVE-2026-85351

    🚨 CVE-2026-85351 The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not validate a user-supplied URL before performing a...

  • CVE-2026-85570

    🚨 CVE-2026-85570 The Tutor LMS WordPress plugin before 4.2.0 does not prevent the correct answers to quiz questions from being included in the...

  • CVE-2026-86442

    🚨 CVE-2026-86442 The WP Event Manager WordPress plugin before 3.4.2 does not verify the ownership or the post type of a user supplied post...

  • CVE-2026-86795

    🚨 CVE-2026-86795 The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks in one of its AJAX actions...

  • CVE-2026-88814

    🚨 CVE-2026-88814 The YITH WooCommerce Gift Cards WordPress plugin before 4.38.1 does not lock or atomically update a gift card's balance when it...

  • CVE-2026-90963

    🚨 CVE-2026-90963 The Essential Real Estate WordPress plugin before 5.3.5 does not perform any authorization or publication-status check in one of...

  • CVE-2026-90964

    🚨 CVE-2026-90964 The Essential Real Estate WordPress plugin before 5.3.5 does not restrict the recipient of one of its contact email actions...

  • CVE-2026-90965

    🚨 CVE-2026-90965 The Essential Real Estate WordPress plugin before 5.3.5 does not perform a publication-status or authorization check in two of...

  • CVE-2026-90966

    🚨 CVE-2026-90966 The Essential Real Estate WordPress plugin before 5.3.5 does not verify, in one of its AJAX actions, that a listing package...

  • CVE-2026-90967

    🚨 CVE-2026-90967 The Essential Real Estate WordPress plugin before 5.3.5 does not verify ownership of an invoice before rendering it in one of its...

  • CVE-2026-91049

    🚨 CVE-2026-91049 The EWWW Image Optimizer WordPress plugin before 8.9.1 does not properly sanitize and restrict a value in post content before...

  • CVE-2026-107776

    🚨 CVE-2026-107776 The Dokan WordPress plugin before 5.3.3 does not reconcile the amount credited to a vendor's reverse-withdrawal ledger against...

  • CVE-2026-121489

    🚨 CVE-2026-121489 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Juneau. The microservice...

Статистика статей

Статьи
53,087
Просмотры
256,406
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху