CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-106008

    🚨 CVE-2026-106008 The FraudLabs Pro SMS Verification WordPress plugin from 1.11.2 to 1.12.1 does not perform authorisation or validity checks...

  • CVE-2026-106466

    🚨 CVE-2026-106466 The JWT Auth WordPress plugin through 3.0.2 does not invalidate previously issued refresh tokens when a user changes or resets...

  • CVE-2026-113702

    🚨 CVE-2026-113702 A security flaw has been discovered in iomad up to 4.5.15/5.0.11/5.1.8/5.2.4. Affected by this vulnerability is the function...

  • CVE-2026-115252

    🚨 CVE-2026-115252 The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks before...

  • CVE-2026-118196

    🚨 CVE-2026-118196 OAuth 1 rebinding vulnerability in Apache Allura. This issue affects Apache Allura: through 1.22.0. Users are recommended...

  • CVE-2026-119515

    🚨 CVE-2026-119515 Missing Authorization vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services...

  • CVE-2026-119524

    🚨 CVE-2026-119524 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aguila Technologies WP...

  • CVE-2026-120761

    🚨 CVE-2026-120761 Improper Restriction of XML External Entity Reference vulnerability in Apache Axis2/Java. When a client built an AxisService...

  • CVE-2026-120832

    🚨 CVE-2026-120832 Server-Side Request Forgery (SSRF) vulnerability in Apache Axis2/Java. When Axis2 built a service description from a WSDL...

  • CVE-2026-120838

    🚨 CVE-2026-120838 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugins360 Labs All-in-One...

  • CVE-2026-120855

    🚨 CVE-2026-120855 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TemplateInvaders TI...

  • CVE-2026-121570

    🚨 CVE-2026-121570 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill RSVP and Event...

  • CVE-2026-121722

    🚨 CVE-2026-121722 Missing Authorization vulnerability in WP E-Signature Formidable Forms Signature Online Contract Automation...

  • CVE-2026-121782

    🚨 CVE-2026-121782 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Content...

  • CVE-2026-122661

    🚨 CVE-2026-122661 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Directorist...

  • CVE-2026-122665

    🚨 CVE-2026-122665 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kitae Park Mang Board WP...

  • CVE-2026-122666

    🚨 CVE-2026-122666 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kitae Park Mang Board WP...

  • CVE-2026-123460

    🚨 CVE-2026-123460 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss WordPress File...

Статистика статей

Статьи
53,082
Просмотры
209,808
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху