| 漏洞ID | 标题 | 厂商 | 产品 | 风险等级 | CVSS 评分 | 发布日期 | AI 分析 |
|---|---|---|---|---|---|---|---|
| CVE-2026-103635 | Apache DataSketches compact Theta sketch 反序列化越界读取导致拒绝服务漏洞 | Apache Software Foundation | Apache DataSketches | - | - | 2026-10-10 10:23:49 | 深度分析 |
| CVE-2026-103513 | Apache DataSketches CPC反序列化越界读写漏洞 | Apache Software Foundation | Apache DataSketches | - | - | 2026-10-10 10:23:21 | 深度分析 |
| CVE-2026-103501 | Apache DataSketches datasketches-cpp HLL CouponList 反序列化缓冲区溢出漏洞 | Apache Software Foundation | Apache DataSketches | - | - | 2026-10-10 10:22:56 | 深度分析 |
| CVE-2026-106139 | Kendo UI for Vue 图表工具提示跨站脚本漏洞 | Progress Software | Kendo UI for Vue | 中危 | 5.4 | 2026-10-10 09:23:49 | 深度分析 |
| CVE-2026-106138 | KendoReact 图表提示跨站脚本漏洞 | Progress Software | KendoReact | 中危 | 5.4 | 2026-10-10 09:23:06 | 深度分析 |
| CVE-2026-108506 | 中兴Z80 Ultra 产品未授权访问漏洞 | ZTE | Z80 Ultra | 中危 | 5.5 | 2026-10-10 09:08:04 | 深度分析 |
| CVE-2026-108505 | 中兴 Z80 Ultra 信息泄露漏洞 | ZTE | Z80 Ultra | 低危 | 3.3 | 2026-10-10 08:50:06 | 深度分析 |
| CVE-2026-4791 | PeproDev Ultimate Profile Solutions <=8.2.36 存储型XSS漏洞 | peprodev | PeproDev Ultimate Profile Solutions | 中危 | 6.4 | 2026-10-10 08:26:40 | 深度分析 |
| CVE-2026-107657 | HivePress <= 1.7.31 未授权存储型跨站脚本漏洞 | hivepress | HivePress – Business Directory, Listings & Classified Ads Plugin | 高危 | 7.2 | 2026-10-10 08:26:40 | 深度分析 |
| CVE-2026-104722 | Listdom <= 6.1.2 路径遍历致任意文件删除漏洞 | webilia | Listdom: AI-powered Business Directory with Classifieds Ads Listings | 中危 | 4.9 | 2026-10-10 08:26:39 | 深度分析 |
| CVE-2026-91136 | Divi Plus <= 2.4.0 svg_image参数未授权任意文件读取漏洞 | Divi Essential | Divi Plus | 高危 | 7.5 | 2026-10-10 08:26:39 | 深度分析 |
| CVE-2026-93951 | WordPress Zeinet 主题 <= 1.0.0 反射型 XSS 漏洞 | Bracketweb | Zeinet | 高危 | 7.1 | 2026-10-10 08:00:09 | 深度分析 |
| CVE-2026-103478 | Premium Packages <= 7.2.6 已验证用户存储型XSS漏洞 | codename065 | Premium Packages – Sell Digital Products Securely | 中危 | 6.4 | 2026-10-10 07:41:49 | 深度分析 |
| CVE-2026-93746 | WebToffee WooCommerce PDF发票插件 <=5.0.2 通过‘email’参数未授权访问订单文档 | webtoffee | WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels | 高危 | 7.5 | 2026-10-10 07:41:49 | 深度分析 |
| CVE-2026-102291 | Kirki <= 6.3.1 用户任意短代码执行漏洞 | themeum | Kirki – Freeform Page Builder, Website Builder & Customizer | 中危 | 5.4 | 2026-10-10 07:41:48 | 深度分析 |
| CVE-2026-97340 | Avada WordPress插件 <=7.16.1 存储型XSS漏洞 | ThemeFusion | Avada | Website Builder For WordPress & WooCommerce | 中危 | 6.4 | 2026-10-10 07:41:48 | 深度分析 |
| CVE-2026-102774 | SureDash <= 1.12.1 社区帖子图片alt属性存储型XSS漏洞 | brainstormforce | SureDash – Community, Courses & Member Dashboard | 中危 | 6.4 | 2026-10-10 07:41:47 | 深度分析 |
| CVE-2026-104728 | AutomatorWP <= 5.8.4 认证用户敏感信息泄露漏洞 | rubengc | AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI | 中危 | 4.3 | 2026-10-10 07:41:47 | 深度分析 |
| CVE-2026-104759 | WPO365 <=44.1 OIDC非认证绕过漏洞 | wpo365 | WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) | 高危 | 8.1 | 2026-10-10 07:41:47 | 深度分析 |
| CVE-2026-100178 | WPAdverts <= 2.3.4 存储型XSS漏洞 | gwin | WPAdverts – Classifieds Plugin | 高危 | 7.2 | 2026-10-10 07:41:46 | 深度分析 |