| 漏洞ID | 标题 | 厂商 | 产品 | 风险等级 | CVSS 评分 | 发布日期 | AI 分析 |
|---|---|---|---|---|---|---|---|
| CVE-2026-17581 | WCPOS 1.9.14 热模板引擎认证用户代码注入漏洞 | kilbot | WCPOS – Point of Sale (POS) plugin for WooCommerce | 高危 | 7.2 | 2026-08-16 05:27:31 | 深度分析 |
| CVE-2026-15056 | StoreEngine ≤2.1.1 可读取任意文件的漏洞 | kodezen | StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More | 中危 | 6.5 | 2026-08-16 05:27:30 | 深度分析 |
| CVE-2026-16775 | Smash Balloon Social Post Feed <= 4.9.0 已授权存储型XSS漏洞 | smub | Smash Balloon Social Post Feed – Simple Social Feeds for WordPress | 中危 | 6.4 | 2026-08-16 05:27:30 | 深度分析 |
| CVE-2026-17582 | Slider Hero <= 9.1.7 管理员SQL注入漏洞 | quantumcloud | Slider Hero with Video Background, Animation | 中危 | 4.9 | 2026-08-16 05:27:30 | 深度分析 |
| CVE-2026-16758 | Snippet Shortcodes <=5.2.0 存储型XSS漏洞 | aliakro | Snippet Shortcodes | 中危 | 6.4 | 2026-08-16 05:27:29 | 深度分析 |
| CVE-2026-18316 | Solace Extra <= 1.6.0 未授权删除网站内容和演示导入漏洞 | solacewp | Solace Extra | 超危 | 9.1 | 2026-08-16 05:27:29 | 深度分析 |
| CVE-2026-10035 | Turnkey bbPress <= 1.7.1 管理员 PHP 对象注入漏洞 | wpweaver | Turnkey bbPress by WeaverTheme | 中危 | 6.6 | 2026-08-16 05:27:29 | 深度分析 |
| CVE-2026-15790 | Video Gallery <= 4.0.4 存储型跨站脚本漏洞 | emarket-design | Video Gallery – YouTube Gallery, Playlist & Video Grid | 中危 | 6.4 | 2026-08-16 05:27:28 | 深度分析 |
| CVE-2026-18402 | SureDash <= 1.10.3 存储型跨站脚本漏洞 | brainstormforce | SureDash – Community, Courses & Member Dashboard | 中危 | 6.4 | 2026-08-16 05:27:28 | 深度分析 |
| CVE-2026-2283 | User Login History 2.1.7 SQL注入漏洞 | faiyazalam | User Login History | 中危 | 4.9 | 2026-08-16 05:27:28 | 深度分析 |
| CVE-2026-15604 | Toocheke Companion <=2.10 存储型跨站脚本漏洞 | toocheke | Toocheke Companion | 中危 | 6.4 | 2026-08-16 05:27:27 | 深度分析 |
| CVE-2026-19934 | Hospital Management System vieworder.php SQL注入漏洞 | itsourcecode | Hospital Management System | 中危 | 6.3 | 2026-08-16 05:15:09 | 深度分析 |
| CVE-2026-19933 | C语言CRM项目Customer Search栈溢出漏洞 | DefaultFuction | Customer-Relationship-Management-In-C-Project | 中危 | 6.3 | 2026-08-16 04:45:09 | 深度分析 |
| CVE-2026-16779 | Kubio AI Page Builder 2.8.5及之前版本 管理员权限缺失导致配置回滚漏洞 | extendthemes | Kubio AI Page Builder | 中危 | 4.3 | 2026-08-16 04:24:57 | 深度分析 |
| CVE-2026-15963 | Quiz and Survey Master <= 11.2.1 认证用户SQL注入漏洞 | expresstech | Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker | 中危 | 6.5 | 2026-08-16 04:24:56 | 深度分析 |
| CVE-2026-15726 | Serious Slider <=1.4.0 存储型XSS漏洞 | cryout-creations | Serious Slider | 中危 | 6.4 | 2026-08-16 04:24:56 | 深度分析 |
| CVE-2026-15002 | Autopay <= 5.0.0 存储型跨站脚本漏洞 | bluemediapl | Autopay | 高危 | 7.2 | 2026-08-16 04:24:56 | 深度分析 |
| CVE-2026-15066 | Loco Translate <= 2.8.7 存储型XSS漏洞 | timwhitlock | Loco Translate | 中危 | 6.4 | 2026-08-16 04:24:55 | 深度分析 |
| CVE-2026-15009 | Advanced File Manager 5.4.12 反射型跨站脚本漏洞 | saadiqbal | Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution | 中危 | 6.1 | 2026-08-16 04:24:55 | 深度分析 |
| CVE-2025-10005 | Password Protect WordPress Lite <= 1.9.20 越权更新密码漏洞 | buildwps | PPWP – Password Protect Pages | 中危 | 4.3 | 2026-08-16 04:24:55 | 深度分析 |