一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-16298 [CRITICAL] – The FoodBoxBooker WordPress plugin before 1.0.7 does not properly validate the password re

未分类
📑 文章目录

The FoodBoxBooker WordPress plugin before 1.0.7 does not properly validate the password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover.