CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-115241

    🚨 CVE-2026-115241 The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not verify that a submitted snapshot identifier...

  • CVE-2026-115242

    🚨 CVE-2026-115242 The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not sanitize the staging destination folder...

  • CVE-2026-115243

    🚨 CVE-2026-115243 The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not validate the extension of the file it...

  • CVE-2026-115250

    🚨 CVE-2026-115250 The Text Typing WordPress plugin before 2.2.2 does not properly sanitize and escape a block attribute before storing it and...

  • CVE-2026-115257

    🚨 CVE-2026-115257 The WP Roster WordPress plugin before 2.36 does not perform any capability or nonce checks before writing its stored roster...

  • CVE-2026-115262

    🚨 CVE-2026-115262 The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not restrict its database...

  • CVE-2026-115426

    🚨 CVE-2026-115426 The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.138 does not properly validate a backup storage directory...

  • CVE-2026-118403

    🚨 CVE-2026-118403 The Premium Packages WordPress plugin before 7.3.1 does not verify that the requester owns a guest order before returning its...

  • CVE-2026-118404

    🚨 CVE-2026-118404 The Premium Packages WordPress plugin before 7.3.1 does not verify ownership or session binding when loading a previously saved...

  • CVE-2026-118407

    🚨 CVE-2026-118407 The Premium Packages WordPress plugin before 7.3.1 does not verify that a user claiming a guest order is the original buyer...

  • CVE-2026-118422

    🚨 CVE-2026-118422 The Stape Conversion Tracking WordPress plugin before 2.3.11 does not validate the sub-path appended to its same-origin proxy's...

  • CVE-2026-118523

    🚨 CVE-2026-118523 The EventPrime WordPress plugin before 4.3.6.1 does not keep the built-in Pending Review post status non-public, allowing...

  • CVE-2026-118637

    🚨 CVE-2026-118637 The Simple Download Monitor WordPress plugin before 4.1.3 does not properly check the visibility of the content referenced by...

  • CVE-2026-118783

    🚨 CVE-2026-118783 The All-in-One Video Gallery WordPress plugin before 5.0.0 does not validate and escape some of its shortcode attributes before...

  • CVE-2026-121816

    🚨 CVE-2026-121816 Herowatch Mini developed by About Time Technologies has a Missing Authentication vulnerability. Unauthenticated remote attackers...

  • CVE-2026-121817

    🚨 CVE-2026-121817 Herowatch Go Server developed by About Time Technologies has a Insecure Direct Object Reference vulnerability. Authenticated...

  • CVE-2026-121818

    🚨 CVE-2026-121818 Herowatch Mini developed by About Time Technologies has a system signing vulnerability. Authenticated local attackers can...

  • CVE-2026-114420

    🚨 CVE-2026-114420 SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-selection...

Статистика статей

Статьи
53,088
Просмотры
262,891
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху