| 漏洞ID | 标题 | 厂商 | 产品 | 风险等级 | CVSS 评分 | 发布日期 | AI 分析 |
|---|---|---|---|---|---|---|---|
| CVE-2024-58375🧪 | OpenTofu 1.8.3之前版本静态评估泄露密钥漏洞 | opentofu | opentofu | 高危 | 7.5 | 2026-08-16 13:14:04 | 深度分析 |
| CVE-2026-74251 | Phoca Cart 5.0.0-6.1.16 未授权SQL注入漏洞 | phoca.cz | Phoca Cart extension for Joomla | 超危 | 9.3 | 2026-08-16 12:51:16 | 深度分析 |
| CVE-2024-13784 | ARForms <=1.8.5 未认证 PHP 对象注入漏洞 | reputeinfosystems | Contact Form, Survey, Quiz & Popup Form Builder – ARForms | 超危 | 9.8 | 2026-08-16 08:31:06 | 深度分析 |
| CVE-2026-74578 | Linux 内核 skcipher 同步处理漏洞 | Linux | Linux | 高危 | 7.1 | 2026-08-16 08:20:32 | 深度分析 |
| CVE-2026-18347 | Kirki ≤6.1.1 认证用户敏感信息泄露漏洞 | themeum | Kirki – Freeform Page Builder, Website Builder & Customizer | 中危 | 4.3 | 2026-08-16 06:38:10 | 深度分析 |
| CVE-2026-13424 | Online Scheduling and Appointment Booking System <= 27.7 未授权存储型XSS漏洞 | ladela | Online Scheduling and Appointment Booking System – Bookly | 高危 | 7.2 | 2026-08-16 06:38:09 | 深度分析 |
| CVE-2026-17087 | WP Travel Engine <=6.8.4 未授权敏感信息泄露漏洞 | wptravelengine | WP Travel Engine – Tour Booking Plugin – Tour Operator Software | 高危 | 7.5 | 2026-08-16 06:38:09 | 深度分析 |
| CVE-2026-17604 | Kirki <= 6.1.1 认证路径穿越导致任意文件读取漏洞 | themeum | Kirki – Freeform Page Builder, Website Builder & Customizer | 中危 | 4.9 | 2026-08-16 06:38:09 | 深度分析 |
| CVE-2026-2497 | Gallery by BestWebSoft <= 4.7.9 SQL注入漏洞 | bestwebsoft | Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress | 高危 | 7.2 | 2026-08-16 06:38:08 | 深度分析 |
| CVE-2026-17608 | WP Compress <= 7.10.09 跨站请求伪造删除任意选项漏洞 | aresit | WP Compress – Instant Performance & Speed Optimization | 中危 | 6.5 | 2026-08-16 06:38:08 | 深度分析 |
| CVE-2026-2357 | Bold Page Builder <=5.6.8 已认证XSS漏洞 | boldthemes | Bold Page Builder | 中危 | 6.4 | 2026-08-16 06:38:07 | 深度分析 |
| CVE-2026-10734 | Infility Global <=2.15.21 /cf7_record存储型XSS漏洞 | infility | Infility Global | 高危 | 7.2 | 2026-08-16 06:38:07 | 深度分析 |
| CVE-2026-12998 | Forminator Forms <=1.55.0.2 通过'draft'参数未授权敏感信息泄露漏洞 | wpmudev | Forminator Forms – Contact Form, Payment Form & Custom Form Builder | 中危 | 5.3 | 2026-08-16 06:38:07 | 深度分析 |
| CVE-2026-19726 | Visualizer <4.0.7 跨用户图表配置泄露 | Unknown | Visualizer | - | - | 2026-08-16 06:00:17 | 深度分析 |
| CVE-2026-19728 | WooCommerce Extra Product Options Builder < 1.2.176 未授权文件泄露漏洞 | Unknown | Extra Product Options Builder for WooCommerce | - | - | 2026-08-16 06:00:17 | 深度分析 |
| CVE-2026-19725 | WPvivid Backup & Migration < 0.9.131 未授权路径遍历漏洞 | Unknown | WPvivid — Backup, Migration & Staging | - | - | 2026-08-16 06:00:17 | 深度分析 |
| CVE-2026-18653 | WP Directory Kit < 1.5.7 管理 SQL 注入漏洞 | Unknown | WP Directory Kit | - | - | 2026-08-16 06:00:16 | 深度分析 |
| CVE-2026-19712 | Masteriyo LMS < 2.3.3 讲师+ 存储型跨站脚本漏洞 | Unknown | Masteriyo LMS | - | - | 2026-08-16 06:00:16 | 深度分析 |
| CVE-2026-19613 | WordPress ECS < 4.3.10 任意文章元数据泄露漏洞 | Unknown | ECS | - | - | 2026-08-16 06:00:16 | 深度分析 |
| CVE-2026-19717 | CatFolders Document Gallery < 2.0.7 REST API未授权附件泄露漏洞 | Unknown | CatFolders Document Gallery & PDF Library | - | - | 2026-08-16 06:00:16 | 深度分析 |