CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-11229

    🚨 CVE-2025-11229 The system fails to properly enforce scope authorization when the `authorize_all_scopes` configuration is enabled. This allows...

  • CVE-2026-101165

    🚨 CVE-2026-101165 The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify an order's payment state or the requested...

  • CVE-2026-105191

    🚨 CVE-2026-105191 The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin before 1.17.11 does not perform a capability...

  • CVE-2026-101166

    🚨 CVE-2026-101166 The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify a product's publication status before creating...

  • CVE-2026-104719

    🚨 CVE-2026-104719 The CookieYes WordPress plugin before 3.5.8 does not correctly restrict who can write its cookie-category script fields, and...

  • CVE-2026-105413

    🚨 CVE-2026-105413 The Form Maker by 10Web WordPress plugin before 1.15.51 does not consistently escape user-submitted field values before...

  • CVE-2026-106000

    🚨 CVE-2026-106000 The Booking Package WordPress plugin before 1.7.34 does not require payment to be completed before saving a booking on calendars...

  • CVE-2026-106649

    🚨 CVE-2026-106649 The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.29 does not prevent users with author-level...

  • CVE-2026-108041

    🚨 CVE-2026-108041 The SEOPress WordPress plugin before 10.4 does not sanitise and escape some of its analytics tracking settings before outputting...

  • CVE-2026-108067

    🚨 CVE-2026-108067 The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not properly verify record ownership before modifying or...

  • CVE-2026-108068

    🚨 CVE-2026-108068 The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform proper authorization checks on one of its...

  • CVE-2026-110964

    🚨 CVE-2026-110964 The Essential Real Estate WordPress plugin before 5.3.5 does not verify that a media attachment belongs to the requesting user...

  • CVE-2026-111740

    🚨 CVE-2026-111740 The Post Duplicator WordPress plugin before 3.0.17 does not check whether the requesting user may view each post before...

  • CVE-2026-111962

    🚨 CVE-2026-111962 The WP Remote Users Sync WordPress plugin before 2.2.0 does not adequately restrict access to the user export files it writes...

  • CVE-2026-112243

    🚨 CVE-2026-112243 The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not sanitise and escape a...

  • CVE-2026-112244

    🚨 CVE-2026-112244 The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not prevent direct access to...

  • CVE-2026-114431

    🚨 CVE-2026-114431 The Enable Media Replace WordPress plugin before 4.2.3 does not pass a replaced media file through the WordPress upload...

  • CVE-2026-115241

    🚨 CVE-2026-115241 The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not verify that a submitted snapshot identifier...

Статистика статей

Статьи
53,088
Просмотры
263,731
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху