| CVE-2024-13831 |
WooCommerce Tabs 1.0.0及以下版本存在权限检查不足的PHP对象注入漏洞 |
高危
|
Wordfence |
|
2025-02-28 08:23:17 |
| CVE-2024-8425 |
WooCommerce Ultimate Gift Card <= 2.6.0 版本任意文件上传漏洞 |
超危
|
Wordfence |
|
2025-02-28 08:23:17 |
| CVE-2024-13469 |
Pricing Table插件低于等于1.12.10版本中存在的经认证的(Contributor+)存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-28 08:23:16 |
| CVE-2024-9019 |
SecuPress Free — WordPress Security <= 2.2.5.3存在经secupress_check_ban_ips_form插入的存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-28 08:23:16 |
| CVE-2024-9193 |
WHMpress <= 6.3-revision-0 版本存在未认证的本地文件包含漏洞可导致任意选项更新 |
超危
|
Wordfence |
|
2025-02-28 08:23:16 |
| CVE-2024-13832 |
Ultra Addons Lite for Elementor <= 1.1.8 - 经认证用户（至少贡献者权限）敏感信息泄露漏洞 |
中危
|
Wordfence |
|
2025-02-28 08:23:15 |
| CVE-2024-13716 |
Forex Calculators <= 1.3.5 - 未授权给已认证用户的设置更新权限漏洞 |
中危
|
Wordfence |
|
2025-02-28 08:23:15 |
| CVE-2025-1560 |
WOW Entrance Effects (WEE!) <= 0.1 - 经认证(贡献者+)存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-28 08:23:14 |
| CVE-2025-1572 |
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - 存在通过'u_id'参数进行认证SQL注入漏洞(影响Doctor+) |
中危
|
Wordfence |
|
2025-02-28 07:34:39 |
| CVE-2025-1571 |
Exclusive Addons for Elementor 2.7.6及之前版本 - 经认证(贡献者+)的 Animated Text 和 Image Comparison 插件中的存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-28 07:03:47 |
| CVE-2025-1405 |
Product Catalog Simple <= 1.7.11 - 经认证的 (Contributor+) show_products 短代码存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-28 07:03:47 |
| CVE-2025-0764 |
wpForo Forum <= 2.4.1 版本中存在已认证 (Subscriber+) 任意文件读取漏洞 |
中危
|
Wordfence |
|
2025-02-28 07:03:46 |
| CVE-2025-1506 |
Wp Social Login and Register Social Counter <= 3.1.0版本存在CSRF漏洞 |
中危
|
Wordfence |
|
2025-02-28 05:23:16 |
| CVE-2024-12820 |
MK Google Directions <= 3.1 - 经认证(贡献者+)存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-28 05:23:16 |
| CVE-2025-1513 |
照片、文件、YouTube、Twitter、Instagram、TikTok、电子商务竞赛画廊 – 上传、投票、通过PayPal销售、社交分享按钮 <= 26.0.0.1 - 未认证存储型跨站脚本漏洞 |
高危
|
Wordfence |
|
2025-02-28 05:23:15 |
| CVE-2025-1511 |
用户注册及会员系统插件4.0.4及之前版本存在反射型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-28 05:23:14 |
| CVE-2025-0801 |
RateMyAgent Official <= 1.4.0 版本存在跨站请求伪造漏洞可导致 API Key 更新 |
中危
|
Wordfence |
|
2025-02-28 04:21:57 |
| CVE-2025-1505 |
Advanced AJAX Product Filters <= 1.6.8.1 反射型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-28 04:21:57 |
| CVE-2025-1757 |
WordPress Portfolio Builder - Portfolio Gallery <= 1.1.7 版本存在经由短代码的经过身份验证的(贡献者+)存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-28 04:21:56 |
| CVE-2024-13796 |
Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 版本存在未认证的信息泄露漏洞 |
中危
|
Wordfence |
|
2025-02-28 04:21:56 |