| 漏洞ID | 标题 | 厂商 | 产品 | 风险等级 | CVSS 评分 | 发布日期 | AI 分析 |
|---|---|---|---|---|---|---|---|
| CVE-2026-104801 | PPOM <= 34.0.10 任意文件删除漏洞 | themeisle | PPOM – Product Addons & Custom Fields for WooCommerce | 超危 | 9.1 | 2026-10-10 06:40:12 | 深度分析 |
| CVE-2026-103897 | Responsive Lightbox & Gallery 2.7.9 存储型XSS漏洞 | dfactory | Responsive Lightbox & Gallery | 中危 | 4.4 | 2026-10-10 06:40:11 | 深度分析 |
| CVE-2026-89100 | WooCommerce Stripe插件<=4.0.17 DOM型XSS漏洞 | paymentplugins | Payment Plugins for Stripe WooCommerce | 中危 | 6.1 | 2026-10-10 06:40:11 | 深度分析 |
| CVE-2026-12626 | 在线预约系统28.2及以下版本PHP对象注入漏洞 | ladela | Online Scheduling and Appointment Booking System – Bookly | 高危 | 7.2 | 2026-10-10 06:40:11 | 深度分析 |
| CVE-2026-95684 | VikBooking 1.8.15 存储型XSS漏洞 | e4jvikwp | VikBooking Hotel Booking Engine & PMS | 高危 | 7.2 | 2026-10-10 06:40:10 | 深度分析 |
| CVE-2026-97348 | SiteOrigin Widgets Bundle 任意文件读取漏洞 | gpriday | SiteOrigin Widgets Bundle | 中危 | 6.5 | 2026-10-10 06:40:10 | 深度分析 |
| CVE-2026-96574 | User Frontend <=4.3.12 订阅者XSS漏洞 | wedevs | User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission | 中危 | 6.4 | 2026-10-10 06:40:09 | 深度分析 |
| CVE-2026-96840 | Post Grid Gutenberg Blocks 5.1.0 未授权存储型XSS漏洞 | wpxpo | Post Grid Gutenberg Blocks – PostX | 高危 | 7.2 | 2026-10-10 06:40:09 | 深度分析 |
| CVE-2026-15178 | Fluent Forms ≤6.2.5 缺失授权导致敏感数据暴露和修改 | wpmanageninja | Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder | 中危 | 5.4 | 2026-10-10 06:40:09 | 深度分析 |
| CVE-2026-96558 | Quiz and Survey Master <= 11.2.6 未授权存储型XSS漏洞 | expresstech | Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker | 高危 | 7.2 | 2026-10-10 06:40:08 | 深度分析 |
| CVE-2026-108502 | 中兴Z80 Ultra信息泄露漏洞 | ZTE | Z80 Ultra | 低危 | 3.3 | 2026-10-10 06:36:49 | 深度分析 |
| CVE-2026-94256 | SMS Alert 4.0.0 未授权身份验证绕过漏洞 | Unknown | SMS Alert | - | - | 2026-10-10 06:00:10 | 深度分析 |
| CVE-2026-94257 | SMS Alert 3.9.6-4.0.0未授权权限提升漏洞 | Unknown | SMS Alert | - | - | 2026-10-10 06:00:10 | 深度分析 |
| CVE-2026-87780 | LTL Freight Quotes <4.2.19 未授权存储型XSS漏洞 | Unknown | LTL Freight Quotes | - | - | 2026-10-10 06:00:10 | 深度分析 |
| CVE-2026-87781 | LTL Freight Quotes 4.2.11-4.2.18 未授权SQL注入漏洞 | Unknown | LTL Freight Quotes | - | - | 2026-10-10 06:00:10 | 深度分析 |
| CVE-2026-85571 | Tutor LMS 4.0.5-4.1.0 instructor+ IDOR任意帖子重定向漏洞 | Unknown | Tutor LMS | - | - | 2026-10-10 06:00:10 | 深度分析 |
| CVE-2026-105995 | Booking Package <1.7.30 未授权客户PII泄露漏洞 | Unknown | Booking Package | - | - | 2026-10-10 06:00:09 | 深度分析 |
| CVE-2026-105990 | Contact Form 7 < 4.0.7 未授权PII泄露漏洞 | Unknown | Accept PayPal Payments using Contact Form 7 | - | - | 2026-10-10 06:00:09 | 深度分析 |
| CVE-2026-107321 | W3 Total Cache 2.10.6前路径穿越漏洞 | Unknown | W3 Total Cache | - | - | 2026-10-10 06:00:09 | 深度分析 |
| CVE-2026-107120 | Contest Gallery <33.0.1 未授权邮箱验证绕过漏洞 | Unknown | Contest Gallery | - | - | 2026-10-10 06:00:09 | 深度分析 |