ShopMonitor.io <1.2.0 Unauth Admin Account Takeover via Password Reset Reroute (CVE-2026-14919)

wpscan.com 2026-07-31翻訳準備中…中国語で表示中中国語 →English →

Security AdvisoryCVE-2026-14919CriticalShopMonitor.io

Affected:

ShopMonitor.io < 1.2.0

Fixed in:

1.2.0

参照 CVE: CVE-2026-14919

文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档

本文由本平台从 wpscan.com 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。

このソースからの他の記事

WordPress Newsletters Plugin Unauthenticated SSRF via SNS Bounce Handler (CVE-2026-16268) 2026-08-06 CVE-2026-16734: Stripe Payment Forms by WP Full Pay Unauthenticated Payment Intent Amount Manipulation 2026-08-06 WooCommerce Drag and Drop Multiple File Upload Plugin Unauthenticated File Deletion (CVE-2026-16054) 2026-08-06 ProfileGrid < 6.0.0 Unauthenticated Group Member List Disclosure (CVE-2026-16290) 2026-08-06 Welcart e-Commerce < 2.11.32 Authenticated SQL Injection via CSV Import (CVE-2026-16065) 2026-08-06

离线存档

离线截图 & PDF 为 Pro 专属