CVE-2026-13414 - The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a nonce that is skipped for certain (and exposed to anonymous visitors on others), allowing unauthenticated attackers to disable the site's maintenance/coming-soon mode under a non-default countdown configuration. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-82279 [高危] CVE-2026-82279 - HyperDX through 1.10.1 fails to enforce role-based ac…
• CVE-2026-82273 [中危] CVE-2026-82273 - Mastra through 1.63.0 contains an authentication bypa…
• CVE-2026-82267 [中危] CVE-2026-82267 - Komodo through 2.3.2 discloses internal resource iden…
• CVE-2026-56100 [高危] CVE-2026-56100 - SpringBlade versions 2.7.3 through 3.5.0 contain a pr…
• CVE-2026-55545 [中危] CVE-2026-55545 - Yamcs is a mission control framework. Prior to 5.12.8…
• CVE-2026-55521 [高危] CVE-2026-55521 - Yamcs is a mission control framework. Prior to 5.12.8…
• CVE-2026-55064 [中危] CVE-2026-55064 - Vikunja is an open-source self-hosted task management…
• CVE-2026-81767 [高危] CVE-2026-81767 - Unauthenticated Broken Access Control in Simple Payme…