CVE-2024-13438 |
SpeedSize Image & Video AI-Optimizer <= 1.5.1存在跨站请求伪造漏洞可用于清空缓存 |
中危
|
Wordfence |
|
2025-02-18 05:22:27 |
CVE-2024-45320 |
N/A |
N/A
|
jpcert |
|
2025-02-18 05:20:24 |
CVE-2024-13609 |
WordPress Migration插件存在未授权敏感信息泄露漏洞 |
中危
|
Wordfence |
|
2025-02-18 04:21:21 |
CVE-2024-13582 |
WPBakery页面构建器( formerly Visual Composer )简易价格表插件1.0及以下版本存在经认证的(供稿人+)存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-18 04:21:21 |
CVE-2024-13677 |
GetBookingsWp - Appointments & Bookings插件基本版本 <= 1.1.27 存在授权用户权限提升漏洞 |
高危
|
Wordfence |
|
2025-02-18 04:21:20 |
CVE-2024-13464 |
Library Bookshelves <= 5.9 - 经认证(贡献者+)存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-18 04:21:20 |
CVE-2024-13565 |
Simple Map No Api <= 1.9 - 经认证(贡献者+)通过width参数存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-18 04:21:20 |
CVE-2024-13622 |
WooCommerce File Uploads插件1.7.1及以下版本存在未经过认证的敏感信息泄露漏洞通过未保护的目录访问 |
高危
|
Wordfence |
|
2025-02-18 04:21:19 |
CVE-2024-13848 |
Reaction Buttons <= 2.1.6 - 经认证 (管理员+) 存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-18 04:21:19 |
CVE-2024-13555 |
1 Click WordPress Migration Plugin ≤ 2.1 版本存在跨站请求伪造漏洞可取消备份过程 |
中危
|
Wordfence |
|
2025-02-18 04:21:19 |
CVE-2024-12314 |
Rapid Cache <= 1.2.3 未经授权缓存投毒漏洞 |
高危
|
Wordfence |
|
2025-02-18 04:21:18 |
CVE-2024-13573 |
Zigaform – Form Builder Lite <= 7.4.2 版本存在经认证的存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-18 04:21:18 |
CVE-2024-13687 |
Team Builder – Meet the Team <= 1.3 版本存在对已认证用户缺乏权限控制漏洞 |
中危
|
Wordfence |
|
2025-02-18 04:21:18 |
CVE-2024-13535 |
Actionwear产品中sync 2.3.0及以下版本存在未认证的完整补丁信息泄露漏洞 |
中危
|
Wordfence |
|
2025-02-18 04:21:17 |
CVE-2024-13576 |
Gumlet Video <= 1.0.3 存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-18 04:21:17 |
CVE-2024-12525 |
Easy MLS Listings Import <= 2.0.1存在经认证的存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-18 04:21:16 |
CVE-2024-13725 |
Keap Official Opt-in Forms <= 2.0.1 - 未认证的有限本地文件包含漏洞 |
超危
|
Wordfence |
|
2025-02-18 04:21:16 |
CVE-2024-13588 |
Simplebooklet PDF Viewer and Embedder 1.1.0及以下版本存在经认证的存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-18 04:21:16 |
CVE-2024-13577 |
CATS职位列表2.0.9及以下版本存在经认证的(贡献者+)存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-02-18 04:21:15 |
CVE-2024-13540 |
WooODT Lite – Delivery & pickup date time location for WooCommerce组件 <= 2.5.1 存在未认证的完整路径信息泄露漏洞 |
中危
|
Wordfence |
|
2025-02-18 04:21:15 |