🛡️ مركز معلومات الثغرات
قاعدة بيانات الثغرات والتهديدات الأمنية المحدّثة
| المعرّف | الخطورة | CVSS | الوصف | الحالة | النشر |
|---|---|---|---|---|---|
| CVE-2026-3477 | متوسط | 5.3 |
The PZ Frontend Manager plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including …
|
— | أبريل 8, 2026 |
| CVE-2026-5167 | متوسط | 5.3 |
The Masteriyo LMS – Online Course Builder for eLearning, LMS & Education plugin for WordPress is vulnerable to Authoriza…
|
— | أبريل 8, 2026 |
| CVE-2026-4654 | متوسط | 5.3 |
The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object R…
|
— | أبريل 8, 2026 |
| CVE-2026-4299 | متوسط | 5.3 |
The MainWP Child Reports plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including…
|
— | أبريل 8, 2026 |
| CVE-2026-2263 | متوسط | 5.3 |
The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized modific…
|
— | أبريل 8, 2026 |
| CVE-2026-32591 | متوسط | 5.2 |
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an u…
|
— | أبريل 8, 2026 |
| CVE-2026-39355 | حرج | 9.9 |
Genealogy is a family tree PHP application. Prior to 5.9.1, a critical broken access control vulnerability in the geneal…
|
⚡ Exploit | أبريل 7, 2026 |
| CVE-2026-20433 | مرتفع | 8.8 |
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of…
|
— | أبريل 7, 2026 |
| CVE-2026-39342 | مرتفع | 8.8 |
ChurchCRM is an open-source church management system. Prior to 7.1.0, the searchwhat parameter via QueryView.php with th…
|
⚡ Exploit | أبريل 7, 2026 |
| CVE-2026-5465 | مرتفع | 8.8 |
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Insecure Direct Object R…
|
— | أبريل 7, 2026 |
| CVE-2026-22683 | مرتفع | 8.8 |
Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operat…
|
— | أبريل 7, 2026 |
| CVE-2026-30460 | مرتفع | 8.8 |
Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in t…
|
⚡ Exploit | أبريل 7, 2026 |
| CVE-2026-4740 | مرتفع | 8.2 |
A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). …
|
— | أبريل 7, 2026 |
| CVE-2026-5736 | مرتفع | 7.3 |
A vulnerability was identified in PowerJob 5.1.0/5.1.1/5.1.2. Impacted is an unknown function of the file powerjob-serve…
|
— | أبريل 7, 2026 |
| CVE-2026-5692 | مرتفع | 7.3 |
A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setGameSpeedCfg of the fil…
|
— | أبريل 7, 2026 |
| CVE-2026-5739 | مرتفع | 7.3 |
A security flaw has been discovered in PowerJob 5.1.0/5.1.1/5.1.2. The affected element is the function GroovyEvaluator.…
|
— | أبريل 7, 2026 |
| CVE-2026-5741 | مرتفع | 7.3 |
A weakness has been identified in suvarchal docker-mcp-server up to 0.1.0. The impacted element is the function stop_con…
|
— | أبريل 7, 2026 |
| CVE-2026-22666 | مرتفع | 7.2 |
Dolibarr ERP/CRM versions prior to 23.0.2 contain an authenticated remote code execution vulnerability in the dol_eval_s…
|
— | أبريل 7, 2026 |
| CVE-2026-22682 | مرتفع | 7.1 |
OpenHarness prior to commit 166fcfe contains an improper access control vulnerability in built-in file tools due to inco…
|
— | أبريل 7, 2026 |
| CVE-2026-5719 | متوسط | 6.3 |
A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /…
|
— | أبريل 7, 2026 |