| CVE-2025-3801 |
None |
低危
|
VulDB |
|
2025-04-19 14:00:11 |
| CVE-2025-3800 |
WCMS AnonymousController.php SQL注入漏洞 |
高危
|
VulDB |
|
2025-04-19 11:31:04 |
| CVE-2025-3799 |
WCMS AnonymousController.php SQL注入漏洞 |
高危
|
VulDB |
|
2025-04-19 10:31:04 |
| CVE-2025-3798 |
WCMS Advertisement Image AdvadminController.php subs 未授权上传漏洞 |
中危
|
VulDB |
|
2025-04-19 10:00:07 |
| CVE-2025-3661 |
SB Chart block <= 1.2.6 - 身份验证（贡献者+）通过 className 参数进行存储型跨站脚本攻击 |
中危
|
Wordfence |
|
2025-04-19 09:23:03 |
| CVE-2025-3404 |
下载管理器 <= 3.3.12 -经过身份验证（作者+）任意文件删除 |
高危
|
Wordfence |
|
2025-04-19 07:23:40 |
| CVE-2021-4455 |
WordPress插件Smart Product Review <= 1.0.4 - 未经身份验证的任意文件上传漏洞 |
超危
|
Wordfence |
|
2025-04-19 07:23:39 |
| CVE-2025-3797 |
SeaCMS admin_topic.php SQL注入漏洞 |
中危
|
VulDB |
|
2025-04-19 07:00:13 |
| CVE-2024-13926 |
WP-Syntax <= 1.2 - Author+ 潜在刘Dos |
N/A
|
WPScan |
|
2025-04-19 06:00:02 |
| CVE-2025-3809 |
Debug Log Manager ≤ 2.3.4 - 未经认证的存储型跨站脚本 vulnerability |
高危
|
Wordfence |
|
2025-04-19 05:30:14 |
| CVE-2025-2111 |
WP Headers And Footers <= 3.1.1 - 跨站请求伪造以更新任意选项 |
高危
|
Wordfence |
|
2025-04-19 05:30:13 |
| CVE-2025-3103 |
CLEVER - 带有历史记录的HTML5无线电播放器 - Shoutcast 和 Icecast - Elementor部件扩展程序 <= 2.4 - 未经验证的任意文件读取 |
高危
|
Wordfence |
|
2025-04-19 04:21:15 |
| CVE-2025-1457 |
Element Pack Elementor插件addons（页眉页脚，模板库，动态网格，滑块和远程箭头）5.10.28及下版本--授权贡献者+ DOM基于存储的XSS漏洞 |
中危
|
Wordfence |
|
2025-04-19 03:21:25 |
| CVE-2025-3275 |
Elementor Themesflat 插件 <= 2.2.5 - 经认证的 (贡献者+) 存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-04-19 03:21:24 |
| CVE-2025-1093 |
AIHub <= 1.3.7 - 无需身份验证的任意文件上传漏洞(generate_image) |
超危
|
Wordfence |
|
2025-04-19 03:21:23 |
| CVE-2025-2010 |
JobWP – 职位板，职位列表，职业页面和招聘插件 <= 2.3.9 - 未经认证的SQL注入 |
高危
|
Wordfence |
|
2025-04-19 02:22:34 |
| CVE-2025-3278 |
UrbanGo Membership <= 1.0.4 - 未经授权的特权提升 |
超危
|
Wordfence |
|
2025-04-19 02:22:34 |
| CVE-2025-3284 |
用户注册与会员PRO - 自定义注册表单，登录表单和用户个人资料<=5.1.3 -跨站请求伪造导致用户删除 |
中危
|
Wordfence |
|
2025-04-19 02:22:33 |
| CVE-2025-3796 |
PHPGurukul美发沙龙管理系统contact-us.php SQL注入漏洞 |
中危
|
VulDB |
|
2025-04-18 21:00:11 |
| CVE-2025-32953 |
z80pack 易受工作流运行工件中 GITHUB_TOKEN 泄露的影响 |
高危
|
GitHub_M |
|
2025-04-18 20:42:47 |