网安资讯详情 - SecLens 情报雷达

网安资讯,一网打尽。汇集权威漏洞通告与行业要闻,结合分组浏览、智能过滤、RSS订阅 和 Webhook 推送,多通道拓展您的安全情报视野。

CVE-2026-14289 | FacturaONE para WooCommerce con VeriFactu Plugin up to 5.36 on WordPress code injection

来源: vuldb · 发布时间 2026-07-27 14:46 (UTC+08:00) · 抓取时间 2026-07-27 15:00 (UTC+08:00)

原文链接

摘要

A vulnerability was found in <a href="https://vuldb.com/product/facturaone_para_woocommerce_con_verifactu_plugin">FacturaONE para WooCommerce con VeriFactu Plugin up to 5.36</a> on WordPress. It has been declared as <a href="https://vuldb.com/kb/risk">critical</a>. The impacted element is an unknown function. Executing a manipulation can lead to code injection. This vulnerability appears as <a href="https://vuldb.com/cve/CVE-2026-14289">CVE-2026-14289</a>. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

标签

扩展字段

{
  "raw_pub_date": "Mon, 27 Jul 2026 08:46:47 +0200"
}