| 漏洞ID | 标题 | 厂商 | 产品 | 风险等级 | CVSS 评分 | 发布日期 | AI 分析 |
|---|---|---|---|---|---|---|---|
| CVE-2026-93931 | WordPress Smash主题<=1.12.0 远程代码执行漏洞 | ThemeREX Group | Smash | 超危 | 9.8 | 2026-10-10 07:00:35 | 深度分析 |
| CVE-2026-106606 | WordPress YITH WooCommerce Affiliates <=3.31.0 PHP对象注入漏洞 | YITH | YITH WooCommerce Affiliates | 高危 | 7.2 | 2026-10-10 07:00:34 | 深度分析 |
| CVE-2026-93949 | WordPress Grocery Shopping Store <= 1.3.3 认证绕过漏洞 | Omegathemes | Grocery Shopping Store | 高危 | 7.1 | 2026-10-10 07:00:34 | 深度分析 |
| CVE-2026-93950 | WordPress Motors主题 <= 1.4.108 访问控制漏洞 | StylemixThemes | Motors | 高危 | 7.5 | 2026-10-10 07:00:34 | 深度分析 |
| CVE-2026-108503 | 中兴Z80 Ultra 信息泄露漏洞 | ZTE | Z80 Ultra | 低危 | 3.3 | 2026-10-10 06:52:59 | 深度分析 |
| CVE-2026-103427 | Simple Membership <=4.8.4 存储型跨站脚本漏洞 | wpinsider-1 | Simple Membership | 中危 | 6.4 | 2026-10-10 06:40:17 | 深度分析 |
| CVE-2026-104006 | SpeedyCache ≤1.4.2 未授权敏感信息泄露漏洞 | softaculous | SpeedyCache – Cache, Optimization, Performance | 低危 | 3.7 | 2026-10-10 06:40:16 | 深度分析 |
| CVE-2026-96572 | WP Meteor 3.4.18 评论作者名未认证存储型XSS漏洞 | aguidrevitch | WP Meteor Website Speed Optimization Addon | 高危 | 7.2 | 2026-10-10 06:40:16 | 深度分析 |
| CVE-2026-100196 | LazyLoad插件<=2.4.0 通过评论内容未授权存储型跨站脚本漏洞 | wp_media | LazyLoad Plugin – Lazy Load Images, Videos, and Iframes | 高危 | 7.2 | 2026-10-10 06:40:15 | 深度分析 |
| CVE-2026-3717 | CV Builder SaaS <= 1.3.1 未授权 PNG 文件上传漏洞 | bestwpdeveloper | WP CV Builder | 中危 | 5.3 | 2026-10-10 06:40:15 | 深度分析 |
| CVE-2026-107742 | 10Web Booster <=2.34.8 未授权存储型XSS漏洞 | 10web | 10Web Booster – Website speed optimization, Cache & Page Speed optimizer | 高危 | 7.2 | 2026-10-10 06:40:15 | 深度分析 |
| CVE-2026-102402 | Team <=6.0.2 存储型跨站脚本漏洞 | techlabpro1 | Team – Team Members Showcase Plugin | 中危 | 6.4 | 2026-10-10 06:40:14 | 深度分析 |
| CVE-2026-6243 | Frontend Admin <= 3.28.36 存储型XSS漏洞 | shabti | Frontend Admin by DynamiApps | 中危 | 6.4 | 2026-10-10 06:40:14 | 深度分析 |
| CVE-2026-100161 | WooCommerce Photo Reviews <=1.2.30 未授权存储型XSS漏洞 | villatheme | Photo Reviews for WooCommerce | 高危 | 7.2 | 2026-10-10 06:40:13 | 深度分析 |
| CVE-2026-5725 | Favicon Rotator <=1.2.11 反射型XSS漏洞 | archetyped | Favicon Rotator | 中危 | 6.1 | 2026-10-10 06:40:13 | 深度分析 |
| CVE-2026-107712 | WP Booking System <= 2.1.0.1 认证用户SQL注入漏洞 | murgroland | WP Booking System – Booking Calendar | 中危 | 6.5 | 2026-10-10 06:40:13 | 深度分析 |
| CVE-2026-94538 | WP File Download 6.3.9 任意文件删除/修改漏洞 | JoomUnited | WP File Download | 高危 | 8.1 | 2026-10-10 06:40:12 | 深度分析 |
| CVE-2026-104801 | PPOM <= 34.0.10 任意文件删除漏洞 | themeisle | PPOM – Product Addons & Custom Fields for WooCommerce | 超危 | 9.1 | 2026-10-10 06:40:12 | 深度分析 |
| CVE-2026-103897 | Responsive Lightbox & Gallery 2.7.9 存储型XSS漏洞 | dfactory | Responsive Lightbox & Gallery | 中危 | 4.4 | 2026-10-10 06:40:11 | 深度分析 |
| CVE-2026-89100 | WooCommerce Stripe插件<=4.0.17 DOM型XSS漏洞 | paymentplugins | Payment Plugins for Stripe WooCommerce | 中危 | 6.1 | 2026-10-10 06:40:11 | 深度分析 |