CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-110176

    🚨 CVE-2026-110176 The File Force Download module for Drupal 7 implements hook_file_download() to add a Content-Disposition header when a file URL...

  • CVE-2026-100155

    🚨 CVE-2026-100155 The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is...

  • CVE-2026-101326

    🚨 CVE-2026-101326 The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is...

  • CVE-2026-109234

    🚨 CVE-2026-109234 The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (bbPress reply body)'...

  • CVE-2026-109997

    🚨 CVE-2026-109997 The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is...

  • CVE-2026-110042

    🚨 CVE-2026-110042 The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays its...

  • CVE-2026-110808

    🚨 CVE-2026-110808 The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restrict who may set the role assigned to...

  • CVE-2026-116520

    🚨 CVE-2026-116520 The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment / shortcode...

  • CVE-2026-116563

    🚨 CVE-2026-116563 The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Stored DOM-Based...

  • CVE-2026-118043

    🚨 CVE-2026-118043 The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a file on the...

  • CVE-2026-118184

    🚨 CVE-2026-118184 The Premium Packages WordPress plugin before 7.2.2 does not prevent unauthenticated visitors from overwriting the stored price...

  • CVE-2026-118185

    🚨 CVE-2026-118185 The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that can be...

  • CVE-2026-118437

    🚨 CVE-2026-118437 The BuddyForms WordPress plugin before 2.10.1 does not properly verify ownership before deleting guest-uploaded attachments...

  • CVE-2026-118438

    🚨 CVE-2026-118438 The Firelight Lightbox WordPress plugin before 2.3.24 does not properly escape image attribute values before processing them in...

  • CVE-2026-118629

    🚨 CVE-2026-118629 The All-in-One Video Gallery WordPress plugin before 5.0.0 does not check a video's publication status before rendering it on...

  • CVE-2026-118638

    🚨 CVE-2026-118638 The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route that writes post...

  • CVE-2026-119977

    🚨 CVE-2026-119977 WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible...

  • CVE-2026-82214

    🚨 CVE-2026-82214 The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning...

Статистика статей

Статьи
53,092
Просмотры
279,491
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху