| CVE-2026-1050 |
risesoft-y9 Digital-Infrastructure REST认证端点SQL注入漏洞 |
高危 |
7.3 |
2026-01-17 |
| CVE-2026-1049 |
LigeroSmart跨站脚本漏洞 |
低危 |
3.5 |
2026-01-17 |
| CVE-2026-1048 |
LigeroSmart AgentTicketZoom页面TicketID参数XSS漏洞 |
低危 |
3.5 |
2026-01-17 |
| CVE-2026-0833 |
WordPress Team Section Block插件存储型XSS漏洞 |
中危 |
6.4 |
2026-01-17 |
| CVE-2026-0820 |
WordPress RepairBuddy插件IDOR漏洞导致订单签名伪造 |
中危 |
4.3 |
2026-01-17 |
| CVE-2026-0808 |
WordPress Spin Wheel插件客户端奖品操纵漏洞 |
中危 |
5.3 |
2026-01-17 |
| CVE-2026-0725 |
WordPress Integrate Dynamics 365 CRM插件存储型XSS漏洞 |
中危 |
4.4 |
2026-01-17 |
| CVE-2026-0691 |
WordPress CM E-Mail Blacklist插件存储型XSS漏洞 |
中危 |
4.4 |
2026-01-17 |
| CVE-2026-0682 |
WordPress Church Admin插件SSRF漏洞 |
低危 |
2.2 |
2026-01-17 |
| CVE-2026-0519 |
NetMotion Secure Access 认证令牌日志泄露漏洞 |
低危 |
3.4 |
2026-01-17 |
| CVE-2026-0518 |
NetMotion Secure Access跨站脚本漏洞 |
中危 |
4.8 |
2026-01-17 |
| CVE-2026-0517 |
NetMotion Secure Access Server拒绝服务漏洞 |
高危 |
7.5 |
2026-01-17 |
| CVE-2025-8615 |
CubeWP插件存储型XSS漏洞 |
中危 |
6.4 |
2026-01-17 |
| CVE-2025-15532 |
Open5GS Timer Handler资源消耗漏洞 |
中危 |
5.3 |
2026-01-17 |
| CVE-2025-15531 |
Open5GS sgwc_bearer_add函数可抵达断言拒绝服务漏洞(CVE-2025-1553... |
中危 |
5.3 |
2026-01-17 |
| CVE-2025-15530 |
Open5GS sgwc_s11断言拒绝服务漏洞 |
中危 |
5.3 |
2026-01-17 |
| CVE-2025-15403 |
WordPress RegistrationMagic插件权限提升漏洞 |
严重 |
9.8 |
2026-01-17 |
| CVE-2025-14632 |
WordPress Filr插件存储型XSS漏洞 |
中危 |
4.4 |
2026-01-17 |
| CVE-2025-14478 |
WordPress Demo Importer Plus插件XXE漏洞 |
高危 |
7.5 |
2026-01-17 |
| CVE-2025-14463 |
WordPress PayPal付款插件未授权订单创建漏洞 |
中危 |
5.3 |
2026-01-17 |
| CVE-2025-14450 |
WordPress Wallet System for WooCommerce插件权限绕过漏洞 |
中危 |
6.5 |
2026-01-17 |
| CVE-2025-14078 |
WordPress PAYGENT WooCommerce插件未授权订单状态修改漏洞 |
中危 |
5.3 |
2026-01-17 |
| CVE-2025-14075 |
WordPress WP Hotel Booking插件敏感信息泄露漏洞 |
中危 |
5.3 |
2026-01-17 |
| CVE-2025-14029 |
WordPress Community Events插件未授权事件批准漏洞 |
中危 |
5.3 |
2026-01-17 |
| CVE-2025-13725 |
WordPress Thim Blocks插件任意文件读取漏洞 |
中危 |
6.5 |
2026-01-17 |
| CVE-2025-12984 |
WordPress Advanced Ads插件SQL注入漏洞 |
中危 |
4.9 |
2026-01-17 |
| CVE-2025-12825 |
WordPress User Registration插件未授权访问漏洞 |
中危 |
5.3 |
2026-01-17 |
| CVE-2025-12718 |
WordPress Quick Contact Form插件开放邮件中继漏洞 |
中危 |
5.8 |
2026-01-17 |
| CVE-2025-12168 |
WordPress Phrase TMS插件越权删除日志漏洞 |
中危 |
4.3 |
2026-01-17 |
| CVE-2025-12129 |
CubeWP插件REST API信息泄露漏洞 |
中危 |
5.3 |
2026-01-17 |