| CVE-2024-13675 |
SlingBlocks – Gutenberg Blocks by FunnelKit (原WooFunnels) <= 1.5.0 存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-03-08 11:16:41 |
| CVE-2025-1664 |
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - 经认证 (Contributor+) 存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-03-08 11:16:40 |
| CVE-2024-13649 |
140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.7 - 经认证（供稿人+）存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-03-08 11:16:40 |
| CVE-2024-11640 |
VikRentCar汽车租赁管理系统 <= 1.4.2 存在跨站请求伪造漏洞可导致认证用户(订阅者+)任意文件上传 |
高危
|
Wordfence |
|
2025-03-08 11:16:40 |
| CVE-2025-1323 |
WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 无认证SQL注入漏洞 |
高危
|
Wordfence |
|
2025-03-08 09:22:55 |
| CVE-2025-1783 |
Gallery Styles <= 1.3.4 版本存在经认证的存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-03-08 09:22:55 |
| CVE-2025-1322 |
WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 存在经认证的（Contributor+）敏感信息泄露漏洞 |
中危
|
Wordfence |
|
2025-03-08 09:22:55 |
| CVE-2025-1325 |
WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 版本存在认证绕过漏洞，允许具有一定权限（订阅者+）的认证用户执行任意短代码 |
中危
|
Wordfence |
|
2025-03-08 09:22:54 |
| CVE-2024-13359 |
WooCommerce 1.12.1及之前版本存在未认证的有限文件上传漏洞 |
高危
|
Wordfence |
|
2025-03-08 09:22:54 |
| CVE-2025-1324 |
WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-03-08 09:22:53 |
| CVE-2025-1287 |
Elementor增强插件 - Elementor插件、页面模板、小部件、 mega菜单、WooCommerce <= 6.2.2 - 经认证(贡献者+)多处小部件中的存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-03-08 08:22:58 |
| CVE-2025-0177 |
Javo Core <= 3.0.0.080 未认证权限提升漏洞 |
超危
|
Wordfence |
|
2025-03-08 08:22:57 |
| CVE-2024-13882 |
Aiomatic - AI 内容创作 writer、editor、chatbot及AI工具包 <= 2.3.8 - 认证用户(Collaborator+)缺乏授权任意文件上传漏洞 |
高危
|
Wordfence |
|
2025-03-08 08:22:57 |
| CVE-2024-13816 |
Aiomatic - AI 内容编写器、编辑器、聊天机器人及AI工具包 <= 2.3.6 - 验证用户（订阅者+）缺乏授权的多种管理员操作漏洞 |
中危
|
Wordfence |
|
2025-03-08 08:22:56 |
| CVE-2024-10321 |
Elementor – WidgetKit 2.5.4及以下版本中存在的经过身份验证(贡献者+)敏感信息泄露漏洞 |
中危
|
Wordfence |
|
2025-03-08 08:22:56 |
| CVE-2024-13908 |
BestWebSoft SMTP <= 1.1.9 - 经认证（管理员+）任意文件上传漏洞 |
高危
|
Wordfence |
|
2025-03-08 07:04:55 |
| CVE-2024-11087 |
miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon <= 200.3.9 认证绕过漏洞 |
高危
|
Wordfence |
|
2025-03-08 07:04:55 |
| CVE-2024-13826 |
Email Keep <= 1.1 - 通过CSRF删除电子邮件 |
N/A
|
WPScan |
|
2025-03-08 06:00:07 |
| CVE-2024-13825 |
Email Keep <= 1.1 反射型XSS漏洞 |
N/A
|
WPScan |
|
2025-03-08 06:00:05 |
| CVE-2024-12114 |
FooGallery – 响应式照片库、图像查看器、Justified、Masonry & Carousel <= 2.4.29 - 不安全直接对象引用导致认证用户（自定义+）任意文章/页面更新漏洞 |
中危
|
Wordfence |
|
2025-03-08 05:30:09 |