CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-120538

    🚨 CVE-2026-120538 The Easy Digital Downloads plugin for WordPress is vulnerable to authentication bypass leading to administrator account takeover...

  • CVE-2026-120544

    🚨 CVE-2026-120544 The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Directory Traversal...

  • CVE-2026-120551

    🚨 CVE-2026-120551 The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to authorization bypass in all...

  • CVE-2026-120552

    🚨 CVE-2026-120552 The SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress plugin for WordPress is vulnerable to Stored Cross-Site...

  • CVE-2026-120558

    🚨 CVE-2026-120558 The Advanced Shipment Tracking for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the `tracking_provider`...

  • CVE-2026-120559

    🚨 CVE-2026-120559 The Contact Form Extender for Divi Builder plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient...

  • CVE-2026-120561

    🚨 CVE-2026-120561 The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to...

  • CVE-2026-120574

    🚨 CVE-2026-120574 The SureCart plugin for WordPress is vulnerable to unauthenticated account takeover in all versions up to, and including, 4.9.5...

  • CVE-2026-120575

    🚨 CVE-2026-120575 The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...

  • CVE-2026-120577

    🚨 CVE-2026-120577 The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to arbitrary file...

  • CVE-2026-120578

    🚨 CVE-2026-120578 The AI Alt Text Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including...

  • CVE-2026-120971

    🚨 CVE-2026-120971 RESTEasy's default exception mapper returns an exception's localized message in the HTTP 500 response body when no application...

  • CVE-2026-77799

    🚨 CVE-2026-77799 ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Factor Authentication bypass that allows attackers...

  • CVE-2026-77800

    🚨 CVE-2026-77800 ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers to log in...

  • CVE-2026-120971

    🚨 CVE-2026-120971 A flaw was found in RESTEasy's default exception mapper. When an unhandled exception other than a WebApplicationException is not...

  • CVE-2026-103379

    🚨 CVE-2026-103379 The WATI Chat and Notification WordPress plugin through 1.1.8 does not require a valid, non-empty secret on a public endpoint...

  • CVE-2026-104647

    🚨 CVE-2026-104647 The weMail WordPress plugin through 2.1.6 does not correctly verify user capabilities in its REST API permission checks...

  • CVE-2026-104648

    🚨 CVE-2026-104648 The weMail WordPress plugin through 2.1.6 does not restrict a site-wide third-party email-service API key to administrators...

Статистика статей

Статьи
53,092
Просмотры
273,024
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху