🛡️ قاعدة بيانات الثغرات الأمنية

ثغرات CVE مع تحليل AI ثنائي اللغة خاص بالمملكة العربية السعودية

المعرّف	العنوان / الوصف	الخطورة	CVSS	الحالة	النشر
CVE-2026-6117	A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. This issue affects the function insta…	MEDIUM	6.3	—	أبريل 12, 2026
CVE-2026-6118	A vulnerability was determined in AstrBotDevs AstrBot up to 4.22.1. Impacted is the function add_mcp…	MEDIUM	6.3	—	أبريل 12, 2026
CVE-2026-6119	A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the func…	MEDIUM	6.3	—	أبريل 12, 2026
CVE-2026-6125	A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelH…	MEDIUM	6.3	—	أبريل 12, 2026
CVE-2026-4979	The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for W…	MEDIUM	5.0	—	أبريل 11, 2026
CVE-2026-5207	The LifterLMS plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all v…	MEDIUM	6.5	—	أبريل 11, 2026
CVE-2026-5226	The Optimole – Optimize Images in Real Time plugin for WordPress is vulnerable to Reflected Cross-Si…	MEDIUM	6.1	—	أبريل 11, 2026
CVE-2026-3358	The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthori…	MEDIUM	5.4	—	أبريل 11, 2026
CVE-2026-3498	The BlockArt Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'clien…	MEDIUM	6.4	—	أبريل 11, 2026
CVE-2026-4895	The GreenShift - Animation and Page Builder Blocks plugin for WordPress is vulnerable to Stored Cros…	MEDIUM	6.4	—	أبريل 11, 2026
CVE-2026-33119	User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) all…	MEDIUM	5.4	—	أبريل 10, 2026
CVE-2026-35620	OpenClaw before 2026.3.24 contains missing authorization vulnerabilities in the /send and /allowlist…	MEDIUM	5.4	—	أبريل 10, 2026
CVE-2026-35621	OpenClaw before 2026.3.24 contains a privilege escalation vulnerability where the /allowlist command…	MEDIUM	6.5	—	أبريل 10, 2026
CVE-2026-35647	OpenClaw before 2026.3.25 contains an access control vulnerability where verification notices bypass…	MEDIUM	5.3	—	أبريل 10, 2026
CVE-2026-35649	OpenClaw before 2026.3.22 contains a settings reconciliation vulnerability that allows attackers to …	MEDIUM	6.5	—	أبريل 10, 2026
CVE-2026-35652	OpenClaw before 2026.3.22 contains an authorization bypass vulnerability in interactive callback dis…	MEDIUM	6.5	—	أبريل 10, 2026
CVE-2026-35654	OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Microsoft Teams feedback…	MEDIUM	5.3	—	أبريل 10, 2026
CVE-2026-35655	OpenClaw before 2026.3.22 contains an identity spoofing vulnerability in ACP permission resolution t…	MEDIUM	5.7	—	أبريل 10, 2026
CVE-2026-35656	OpenClaw before 2026.3.22 contains an authentication bypass vulnerability in the X-Forwarded-For hea…	MEDIUM	6.5	—	أبريل 10, 2026
CVE-2026-35657	OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in the HTTP /sessions/:sess…	MEDIUM	6.5	—	أبريل 10, 2026
CVE-2026-35658	OpenClaw before 2026.3.2 contains a filesystem boundary bypass vulnerability in the image tool that …	MEDIUM	6.5	—	أبريل 10, 2026
CVE-2026-35661	OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Telegram callback query …	MEDIUM	5.3	—	أبريل 10, 2026
CVE-2026-35664	OpenClaw before 2026.3.25 contains an authentication bypass vulnerability in raw card send surface t…	MEDIUM	5.3	—	أبريل 10, 2026
CVE-2026-35665	OpenClaw before 2026.3.24 contains an incomplete fix for CVE-2026-32011 where the Feishu webhook han…	MEDIUM	5.3	—	أبريل 10, 2026
CVE-2026-35667	OpenClaw before 2026.3.24 contains an incomplete fix for CVE-2026-27486 where the !stop chat command…	MEDIUM	6.1	—	أبريل 10, 2026