CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-109386

    🚨 CVE-2026-109386 The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization bypass in all...

  • CVE-2026-110251

    🚨 CVE-2026-110251 The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized Media Library File Deletion in all versions...

  • CVE-2026-111109

    🚨 CVE-2026-111109 The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Graph og:title meta tag of a...

  • CVE-2026-111254

    🚨 CVE-2026-111254 The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions...

  • CVE-2026-118437

    🚨 CVE-2026-118437 The BuddyForms WordPress plugin before 2.10.1 does not properly verify ownership before deleting guest-uploaded attachments...

  • CVE-2026-118438

    🚨 CVE-2026-118438 The Firelight Lightbox WordPress plugin before 2.3.24 does not properly escape image attribute values before processing them in...

  • CVE-2026-118629

    🚨 CVE-2026-118629 The All-in-One Video Gallery WordPress plugin before 5.0.0 does not check a video's publication status before rendering it on...

  • CVE-2026-118638

    🚨 CVE-2026-118638 The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route that writes post...

  • CVE-2026-101326

    🚨 CVE-2026-101326 The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is...

  • CVE-2026-119977

    🚨 CVE-2026-119977 WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible...

  • CVE-2026-82214

    🚨 CVE-2026-82214 The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning...

  • CVE-2026-92294

    🚨 CVE-2026-92294 The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to limited file deletion...

  • CVE-2026-94361

    🚨 CVE-2026-94361 The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incoming payment...

  • CVE-2026-107653

    🚨 CVE-2026-107653 The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin...

  • CVE-2026-107750

    🚨 CVE-2026-107750 The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...

  • CVE-2026-107765

    🚨 CVE-2026-107765 The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up...

  • CVE-2026-109217

    🚨 CVE-2026-109217 The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all...

  • CVE-2026-109220

    🚨 CVE-2026-109220 The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Injection in...

Статистика статей

Статьи
53,098
Просмотры
284,632
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху