آخرین آسیبپذیریها
| شناسه | شدت | شرح | EPSS | انتشار |
|---|---|---|---|---|
| CVE-2026-90719 | 2.7پایین |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release vers…
Dell PowerProtect Data Domain Management Center
|
۰٫۱۸٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-90720 | 6.7متوسط |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 throu…
Dell PowerProtect Data Domain
|
۰٫۰۸٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-90721 | 3.4پایین |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 throu…
Dell PowerProtect Data Domain
|
۰٫۱۲٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-90723 | 2.7پایین |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release vers…
Dell PowerProtect Data Domain Management Center
|
۰٫۱۸٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-90724 | 2.7پایین |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release vers…
Dell PowerProtect Data Domain Management Center
|
۰٫۱۸٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118435 | 5.4متوسط |
Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.
|
۰٫۲٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-85655 | 4.3متوسط |
Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow
ShortPixel Enable Media Replace
|
۰٫۲۷٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-101935 | 6.1متوسط |
Echo Knowledge Base <= 17.214.0 - Reflected Cross-Site Scripting via 'new_kb_config' Parameter
echoplugins Echo Knowledge Base – Documentation
|
۰٫۲۵٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-92797 | 8.8بالا |
Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter
MemberPress Memberpress
|
۰٫۱۴٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-63286 | 7.1بالا |
Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro automatically creates one more such backup for recovery purp…
Axis Communications AXIS Camera Station 5Axis Communications AXIS Camera Station Pro
|
۰٫۰۷٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-109975 | 6.4متوسط |
Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute
CozyThemes Cozy Blocks – Website Builder & Business Growth Toolkit | Popups
|
۰٫۲٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-76005 | 6.5متوسط |
WP Inventory Manager <= 2.5.5 - Authenticated (Contributor+) SQL Injection via 'sort_order' Shortcode Attribute
chuck1982 WP Inventory Manager
|
۰٫۲۸٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118169 | 4.9متوسط |
Hustle <= 7.8.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'cta_label' Parameter
WPMU DEV Hustle – Email Marketing
|
۰٫۱۸٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-104743 | 4.9متوسط |
Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass Assignment
tainacan Tainacan
|
۰٫۸۴٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-76780 | 6.3متوسط |
BeyondSEO <= 1.3.6 - Missing Authorization to Authenticated (Contributor+) Limited Privilege Escalation
rankingcoach BeyondSEO – AI SEO to Improve Rankings
|
۰٫۲٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-110185 | 5.9متوسط |
Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More <= 1.31.0 - Unauthenticated Local File Inclusion via 'webhook' and 'body' Parameters
bitpressadmin Bit Flows: AI Agent Automation & Integrations for Forms
|
۰٫۵۵٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-116750 | 6.5متوسط |
VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute
e4jvikwp VikRentCar Car Rental Management System
|
۰٫۲۶٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-109218 | 9.8بحرانی |
Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass
Kleor Contact Manager
|
۰٫۶۴٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-109370 | 6.4متوسط |
Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attribute
bPlugins Document Embedder – let visitors read files without downloading
|
۰٫۲۱٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-77871 | 6.4متوسط |
Post Snippets <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Saad Iqbal Post Snippets – Custom WordPress Code Snippets Customizer
|
۰٫۲۴٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-107710 | 6.4متوسط |
Hustle <= 7.8.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Module Content Title
WPMU DEV Hustle – Email Marketing
|
۰٫۲٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-109988 | 4.4متوسط |
Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameter
acowebs Product Addons for Woocommerce – Product Options with Custom Fields
|
۰٫۲٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-2839 | 5.3متوسط |
Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpoints
hwk-fr Advanced Custom Fields: Extended
|
۰٫۲۷٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-116761 | 5.4متوسط |
CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scripting via Grouped WYSIWYG Field via Front-End Form
jtsternberg CMB2
|
۰٫۲۲٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-108366 | 6.4متوسط |
easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Block Attribute
wpdevteam easy.jobs – AI powered Job Listing
|
۰٫۲٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|