| 漏洞ID | 标题 | 厂商 | 产品 | 风险等级 | CVSS 评分 | 发布日期 | AI 分析 |
|---|---|---|---|---|---|---|---|
| CVE-2026-2357 | Bold Page Builder <=5.6.8 已认证XSS漏洞 | boldthemes | Bold Page Builder | 中危 | 6.4 | 2026-08-16 06:38:07 | 深度分析 |
| CVE-2026-10734 | Infility Global <=2.15.21 /cf7_record存储型XSS漏洞 | infility | Infility Global | 高危 | 7.2 | 2026-08-16 06:38:07 | 深度分析 |
| CVE-2026-12998 | Forminator Forms <=1.55.0.2 通过'draft'参数未授权敏感信息泄露漏洞 | wpmudev | Forminator Forms – Contact Form, Payment Form & Custom Form Builder | 中危 | 5.3 | 2026-08-16 06:38:07 | 深度分析 |
| CVE-2026-19726 | Visualizer <4.0.7 跨用户图表配置泄露 | Unknown | Visualizer | - | - | 2026-08-16 06:00:17 | 深度分析 |
| CVE-2026-19728 | WooCommerce Extra Product Options Builder < 1.2.176 未授权文件泄露漏洞 | Unknown | Extra Product Options Builder for WooCommerce | - | - | 2026-08-16 06:00:17 | 深度分析 |
| CVE-2026-19725 | WPvivid Backup & Migration < 0.9.131 未授权路径遍历漏洞 | Unknown | WPvivid — Backup, Migration & Staging | - | - | 2026-08-16 06:00:17 | 深度分析 |
| CVE-2026-18653 | WP Directory Kit < 1.5.7 管理 SQL 注入漏洞 | Unknown | WP Directory Kit | - | - | 2026-08-16 06:00:16 | 深度分析 |
| CVE-2026-19712 | Masteriyo LMS < 2.3.3 讲师+ 存储型跨站脚本漏洞 | Unknown | Masteriyo LMS | - | - | 2026-08-16 06:00:16 | 深度分析 |
| CVE-2026-19613 | WordPress ECS < 4.3.10 任意文章元数据泄露漏洞 | Unknown | ECS | - | - | 2026-08-16 06:00:16 | 深度分析 |
| CVE-2026-19717 | CatFolders Document Gallery < 2.0.7 REST API未授权附件泄露漏洞 | Unknown | CatFolders Document Gallery & PDF Library | - | - | 2026-08-16 06:00:16 | 深度分析 |
| CVE-2026-19714 | Simple JWT Login <3.6.8 未认证账户接管漏洞 | Unknown | Simple JWT Login | - | - | 2026-08-16 06:00:16 | 深度分析 |
| CVE-2026-19711 | Premium Packages <7.0.7 任意金额提现漏洞 | Unknown | Premium Packages | - | - | 2026-08-16 06:00:16 | 深度分析 |
| CVE-2026-15384 | Manual Image Crop <1.15 IDOR导致任意附件覆盖漏洞 | Unknown | Manual Image Crop | - | - | 2026-08-16 06:00:15 | 深度分析 |
| CVE-2026-13712 | Divi 5.0-5.8.1 贡献者级存储型XSS漏洞 | Unknown | Divi | - | - | 2026-08-16 06:00:15 | 深度分析 |
| CVE-2026-17533 | All-in-One WP Migration备份插件<7.108 REST导入PHP代码执行漏洞 | Unknown | All-in-One WP Migration and Backup | - | - | 2026-08-16 06:00:15 | 深度分析 |
| CVE-2026-15351 | WC Vendors <= 2.7.0 认证用户SQL注入漏洞 | wcvendors | WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors | 中危 | 4.9 | 2026-08-16 05:27:32 | 深度分析 |
| CVE-2026-15345 | ShortPixel Adaptive Images ≤3.11.5 越权第三方插件选项修改漏洞 | shortpixel | ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization | 中危 | 4.3 | 2026-08-16 05:27:31 | 深度分析 |
| CVE-2026-9767 | School Management 5.4 认证SQL注入漏洞 | weblizar | The School Management – Education & Learning ERP | 中危 | 6.5 | 2026-08-16 05:27:31 | 深度分析 |
| CVE-2026-17581 | WCPOS 1.9.14 热模板引擎认证用户代码注入漏洞 | kilbot | WCPOS – Point of Sale (POS) plugin for WooCommerce | 高危 | 7.2 | 2026-08-16 05:27:31 | 深度分析 |
| CVE-2026-15056 | StoreEngine ≤2.1.1 可读取任意文件的漏洞 | kodezen | StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More | 中危 | 6.5 | 2026-08-16 05:27:30 | 深度分析 |