| 漏洞ID | 标题 | 厂商 | 产品 | 风险等级 | CVSS 评分 | 发布日期 | AI 分析 |
|---|---|---|---|---|---|---|---|
| CVE-2026-107631 | Complianz <=2.5 通过'uid'参数的未授权存储型XSS漏洞 | davidevalerio | Record of Consent Extension for Complianz | 高危 | 7.2 | 2026-10-14 07:43:35 | 深度分析 |
| CVE-2026-107650 | GeoDirectory <=2.8.190 存储型XSS漏洞 | paoltaia | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 中危 | 6.4 | 2026-10-14 07:43:35 | 深度分析 |
| CVE-2026-104761 | Mang Board 2.4.3 存储型跨站脚本漏洞 | kitae-park | Mang Board | 中危 | 6.4 | 2026-10-14 07:43:34 | 深度分析 |
| CVE-2026-107751 | Mang Board <=2.4.3 通过'user_name'参数的未授权存储型XSS漏洞 | kitae-park | Mang Board | 高危 | 7.2 | 2026-10-14 07:43:34 | 深度分析 |
| CVE-2026-107756 | Meow Lightbox <= 5.6.2 存储型XSS漏洞 | tigroumeow | Meow Lightbox | 中危 | 6.4 | 2026-10-14 07:43:34 | 深度分析 |
| CVE-2026-103367 | ShopMagic <= 4.9.0 未授权本地文件包含漏洞 | wpdesk | ShopMagic – email automation for WordPress | 高危 | 8.1 | 2026-10-14 07:43:33 | 深度分析 |
| CVE-2026-110284 | LifterLMS <= 10.3.1 本地文件包含漏洞 | lifterlms | LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | 高危 | 7.5 | 2026-10-14 07:43:33 | 深度分析 |
| CVE-2025-9373 | PeproDev Branches Map <=3.0.1 存储型XSS漏洞 | peprodev | PeproDev Branches Map (Mapify) | 中危 | 6.4 | 2026-10-14 07:43:33 | 深度分析 |
| CVE-2026-103366 | Appointment Booking <=5.7.3 直接对象引用致敏感信息泄露 | latepoint | Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | 高危 | 7.5 | 2026-10-14 07:43:32 | 深度分析 |
| CVE-2026-103380 | Appointment Booking插件≤5.7.3存在已认证用户敏感信息泄露漏洞 | latepoint | Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | 中危 | 4.3 | 2026-10-14 07:43:32 | 深度分析 |
| CVE-2026-100163 | Appointment Booking <=5.7.2 认证绕过致账户接管 | latepoint | Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | 高危 | 7.4 | 2026-10-14 07:43:32 | 深度分析 |
| CVE-2026-107754 | GeoDirectory <= 2.8.190 存储型XSS漏洞 | paoltaia | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 中危 | 6.4 | 2026-10-14 07:43:31 | 深度分析 |
| CVE-2026-105107 | Koha reports/cat_issues_top.pl 通过请求参数进行SQL注入 | Koha Community | Koha | 高危 | 7.6 | 2026-10-14 07:32:57 | 深度分析 |
| CVE-2026-105106 | Koha scheduler.pl jobid参数注入漏洞 | Koha Community | Koha | 高危 | 8.8 | 2026-10-14 07:23:03 | 深度分析 |
| CVE-2026-110227 | WordPress Restricted Site Access 7.6.2 前 访问控制漏洞 | 10up | Restricted Site Access | 中危 | 5.3 | 2026-10-14 07:11:42 | 深度分析 |
| CVE-2026-109901 | WordPress CP Multi View Event Calendar插件 <= 1.4.41 SQL注入漏洞 | Codepeople | CP Multi View Event Calendar | 高危 | 8.5 | 2026-10-14 07:11:16 | 深度分析 |
| CVE-2026-107171 | Trellix Agent 5.8.4硬编码密钥致数据库解密 | Trellix | Trellix Agent | 中危 | 6.9 | 2026-10-14 07:11:09 | 深度分析 |
| CVE-2026-89310 | JTL-WMS SQL命令注入漏洞 | JTL SW GmbH | JTL-WMS | 超危 | 9.9 | 2026-10-14 06:50:34 | 深度分析 |
| CVE-2026-110467 | WisdomGarden Tronclass 不安全的直接对象引用漏洞 | WisdomGarden | Tronclass | 中危 | 4.3 | 2026-10-14 06:31:25 | 深度分析 |
| CVE-2026-110466 | WisdomGarden Tronclass 敏感数据泄露漏洞 | WisdomGarden | Tronclass | 中危 | 4.3 | 2026-10-14 06:29:53 | 深度分析 |