目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1310 CNY

100%
コーヒーを一杯おごる

WP Travel Pro <= 10.6.0 Unauthenticated Arbitrary User Deletion via REST API (CVE-2026-4290)

www.wordfence.com 2026-06-02翻訳準備中…中国語で表示中中国語 →English →
Security AdvisoryCVE-2026-4290CriticalDefiant Inc.
Affected:
  • WP Travel Pro <= 10.6.0
参照 CVE: CVE-2026-4290 · 9.1
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档
本文由本平台从 www.wordfence.com 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。
このソースからの他の記事
WordPress OTP Login Plugin Unauthenticated Auth Bypass via Firebase (CVE-2026-3655) 2026-06-02 WordPress Simply Schedule Appointments Missing Authorization Arbitrary Modification (CVE-2026-6937) 2026-06-02 PDF Embedder WordPress Plugin Information Disclosure via Block Editor 2026-06-02 Easy Digital Downloads <= 3.6.7 CSRF to Payment Account Hijacking via square_tokens (CVE-2026-7533) 2026-06-02 WordPress Automotive Car Dealership Business Theme <=13.4.1 Authenticated Stored XSS via project_details (CVE-2025-14042 2026-06-02
离线存档

离线截图 & PDF 为 Pro 专属

升级 Pro