CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-108068

    🚨 CVE-2026-108068 The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform proper authorization checks on one of its...

  • CVE-2026-110692

    🚨 CVE-2026-110692 The PowerPack Addons for Elementor: Widgets, Form Styler and Templates WordPress plugin before 3.1.3 does not validate a...

  • CVE-2026-110964

    🚨 CVE-2026-110964 The Essential Real Estate WordPress plugin before 5.3.5 does not verify that a media attachment belongs to the requesting user...

  • CVE-2026-111740

    🚨 CVE-2026-111740 The Post Duplicator WordPress plugin before 3.0.17 does not check whether the requesting user may view each post before...

  • CVE-2026-111962

    🚨 CVE-2026-111962 The WP Remote Users Sync WordPress plugin before 2.2.0 does not adequately restrict access to the user export files it writes...

  • CVE-2026-112243

    🚨 CVE-2026-112243 The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not sanitise and escape a...

  • CVE-2026-112244

    🚨 CVE-2026-112244 The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not prevent direct access to...

  • CVE-2026-114431

    🚨 CVE-2026-114431 The Enable Media Replace WordPress plugin before 4.2.3 does not pass a replaced media file through the WordPress upload...

  • CVE-2026-115241

    🚨 CVE-2026-115241 The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not verify that a submitted snapshot identifier...

  • CVE-2026-115242

    🚨 CVE-2026-115242 The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not sanitize the staging destination folder...

  • CVE-2026-115243

    🚨 CVE-2026-115243 The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not validate the extension of the file it...

  • CVE-2026-115257

    🚨 CVE-2026-115257 The WP Roster WordPress plugin before 2.36 does not perform any capability or nonce checks before writing its stored roster...

  • CVE-2026-115262

    🚨 CVE-2026-115262 The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not restrict its database...

  • CVE-2026-115426

    🚨 CVE-2026-115426 The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.138 does not properly validate a backup storage directory...

  • CVE-2026-118403

    🚨 CVE-2026-118403 The Premium Packages WordPress plugin before 7.3.1 does not verify that the requester owns a guest order before returning its...

  • CVE-2026-118404

    🚨 CVE-2026-118404 The Premium Packages WordPress plugin before 7.3.1 does not verify ownership or session binding when loading a previously saved...

  • CVE-2026-118407

    🚨 CVE-2026-118407 The Premium Packages WordPress plugin before 7.3.1 does not verify that a user claiming a guest order is the original buyer...

  • CVE-2026-118422

    🚨 CVE-2026-118422 The Stape Conversion Tracking WordPress plugin before 2.3.11 does not validate the sub-path appended to its same-origin proxy's...

Статистика статей

Статьи
53,087
Просмотры
261,983
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху