| CVE ID | タイトル | ベンダー | プロダクト | 深刻度 | CVSS スコア | 公開日 | AI 分析 |
|---|---|---|---|---|---|---|---|
| CVE-2026-73060🧪 | Scriban 3.0.0-7.2.5 拒绝服务漏洞 | scriban | scriban | 高危 | 7.5 | 2026-08-16 13:14:07 | 詳細分析 |
| CVE-2026-73058 | stoatchat <0.15.0 IPv6未指定地址绕过SSRF漏洞 | stoatchat | stoatchat | 中危 | 5.8 | 2026-08-16 13:14:06 | 詳細分析 |
| CVE-2026-73057🧪 | stoatchat 0.15.0 前未限制SVG渲染导致拒绝服务漏洞 | stoatchat | stoatchat | 高危 | 7.5 | 2026-08-16 13:14:05 | 詳細分析 |
| CVE-2026-73056 | 思源内核3.7.4前未限制暴力破解API令牌漏洞 | siyuan-note | siyuan | 超危 | 9.8 | 2026-08-16 13:14:05 | 詳細分析 |
| CVE-2024-58375🧪 | OpenTofu 1.8.3之前版本静态评估泄露密钥漏洞 | opentofu | opentofu | 高危 | 7.5 | 2026-08-16 13:14:04 | 詳細分析 |
| CVE-2026-74251 | Phoca Cart 5.0.0-6.1.16 未授权SQL注入漏洞 | phoca.cz | Phoca Cart extension for Joomla | 超危 | 9.3 | 2026-08-16 12:51:16 | 詳細分析 |
| CVE-2024-13784 | ARForms <=1.8.5 未认证 PHP 对象注入漏洞 | reputeinfosystems | Contact Form, Survey, Quiz & Popup Form Builder – ARForms | 超危 | 9.8 | 2026-08-16 08:31:06 | 詳細分析 |
| CVE-2026-74578 | Linux 内核 skcipher 同步处理漏洞 | Linux | Linux | 高危 | 7.1 | 2026-08-16 08:20:32 | 詳細分析 |
| CVE-2026-18347 | Kirki ≤6.1.1 认证用户敏感信息泄露漏洞 | themeum | Kirki – Freeform Page Builder, Website Builder & Customizer | 中危 | 4.3 | 2026-08-16 06:38:10 | 詳細分析 |
| CVE-2026-13424 | Online Scheduling and Appointment Booking System <= 27.7 未授权存储型XSS漏洞 | ladela | Online Scheduling and Appointment Booking System – Bookly | 高危 | 7.2 | 2026-08-16 06:38:09 | 詳細分析 |
| CVE-2026-17087 | WP Travel Engine <=6.8.4 未授权敏感信息泄露漏洞 | wptravelengine | WP Travel Engine – Tour Booking Plugin – Tour Operator Software | 高危 | 7.5 | 2026-08-16 06:38:09 | 詳細分析 |
| CVE-2026-17604 | Kirki <= 6.1.1 认证路径穿越导致任意文件读取漏洞 | themeum | Kirki – Freeform Page Builder, Website Builder & Customizer | 中危 | 4.9 | 2026-08-16 06:38:09 | 詳細分析 |
| CVE-2026-2497 | Gallery by BestWebSoft <= 4.7.9 SQL注入漏洞 | bestwebsoft | Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress | 高危 | 7.2 | 2026-08-16 06:38:08 | 詳細分析 |
| CVE-2026-17608 | WP Compress <= 7.10.09 跨站请求伪造删除任意选项漏洞 | aresit | WP Compress – Instant Performance & Speed Optimization | 中危 | 6.5 | 2026-08-16 06:38:08 | 詳細分析 |
| CVE-2026-2357 | Bold Page Builder <=5.6.8 已认证XSS漏洞 | boldthemes | Bold Page Builder | 中危 | 6.4 | 2026-08-16 06:38:07 | 詳細分析 |
| CVE-2026-10734 | Infility Global <=2.15.21 /cf7_record存储型XSS漏洞 | infility | Infility Global | 高危 | 7.2 | 2026-08-16 06:38:07 | 詳細分析 |
| CVE-2026-12998 | Forminator Forms <=1.55.0.2 通过'draft'参数未授权敏感信息泄露漏洞 | wpmudev | Forminator Forms – Contact Form, Payment Form & Custom Form Builder | 中危 | 5.3 | 2026-08-16 06:38:07 | 詳細分析 |
| CVE-2026-19726 | Visualizer <4.0.7 跨用户图表配置泄露 | Unknown | Visualizer | - | - | 2026-08-16 06:00:17 | 詳細分析 |
| CVE-2026-19728 | WooCommerce Extra Product Options Builder < 1.2.176 未授权文件泄露漏洞 | Unknown | Extra Product Options Builder for WooCommerce | - | - | 2026-08-16 06:00:17 | 詳細分析 |
| CVE-2026-19725 | WPvivid Backup & Migration < 0.9.131 未授权路径遍历漏洞 | Unknown | WPvivid — Backup, Migration & Staging | - | - | 2026-08-16 06:00:17 | 詳細分析 |