云虫漏洞情报：CVE 自动同步更新。

搜索

• CVE-2026-19084 [未知] CVE-2026-19084 - The shared-files-pro WordPress plugin before 1.7.70 does not validate the… (CVE) 2026-08-28
• CVE-2026-14567 [未知] CVE-2026-14567 - The User Frontend WordPress plugin before 4.3.10 does not restrict acces… (CVE) 2026-08-28
• CVE-2026-14558 [未知] CVE-2026-14558 - The User Frontend WordPress plugin before 4.3.10 does not properly valid… (CVE) 2026-08-28
• CVE-2026-12514 [未知] CVE-2026-12514 - The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPr… (CVE) 2026-08-28
• CVE-2026-12513 [未知] CVE-2026-12513 - The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPr… (CVE) 2026-08-28
• CVE-2026-82090 [未知] CVE-2026-82090 - Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects exter… (CVE) 2026-08-28
• CVE-2026-82089 [未知] CVE-2026-82089 - The wallabag (aka fr.gaulupeau.apps.InThePoche) application through 2.6.0… (CVE) 2026-08-28
• CVE-2026-82082 [危急] CVE-2026-82082 - NUMail developed by Green-Computing has an OS Command Injection vulnerabi… (CVE) 2026-08-28
• CVE-2026-82081 [中危] CVE-2026-82081 - wallabag 2 through 2.6.14 allows SSRF because a crafted title or content … (CVE) 2026-08-28
• CVE-2026-77365 [高危] CVE-2026-77365 - The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | … (CVE) 2026-08-28
• CVE-2026-76053 [高危] CVE-2026-76053 - The TranslatePress – Translate Multilingual sites with AI Translation plu… (CVE) 2026-08-28
• CVE-2026-3129 [中危] CVE-2026-3129 - The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Sit… (CVE) 2026-08-28
• CVE-2026-18983 [高危] CVE-2026-18983 - The One User Avatar | User Profile Picture plugin for WordPress is vulner… (CVE) 2026-08-28
• CVE-2026-18978 [高危] CVE-2026-18978 - The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Si… (CVE) 2026-08-28
• CVE-2026-18324 [高危] CVE-2026-18324 - The Forminator Forms – Contact Form, Payment Form & Custom Form Builder p… (CVE) 2026-08-28
• CVE-2026-16759 [中危] CVE-2026-16759 - The Tutor LMS – eLearning and online course solution plugin for WordPress… (CVE) 2026-08-28
• CVE-2026-16654 [中危] CVE-2026-16654 - The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored C… (CVE) 2026-08-28
• CVE-2026-15798 [中危] CVE-2026-15798 - The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Sit… (CVE) 2026-08-28
• CVE-2026-78618 [未知] CVE-2026-78618 - A business logic flaw in WatchGuard Dimension allows an authenticated adm… (CVE) 2026-08-28
• CVE-2026-78617 [未知] CVE-2026-78617 - WatchGuard Dimension's web login endpoint does not enforce effective rate… (CVE) 2026-08-28