CWE-434 危险类型文件的不加限制上传 类弱点 2015 条 CVE 漏洞汇总，含 AI 中文分析。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2021-47757 | Chikitsa 代码问题漏洞 — Chikitsa Patient Management System | 8.8 | High | 2026-01-15 |
| CVE-2021-47758 | Chikitsa 代码问题漏洞 — Chikitsa Patient Management System | 8.8 | High | 2026-01-15 |
| CVE-2021-47753 | phpKF CMS 安全漏洞 — phpKF CMS | 9.8 | Critical | 2026-01-15 |
| CVE-2025-13062 | WordPress plugin Supreme Modules Lite 代码问题漏洞 — Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder | 8.8 | High | 2026-01-15 |
| CVE-2022-50893 | VIAVIWEB Wallpaper Admin 代码问题漏洞 — VIAVIWEB Wallpaper Admin | 9.8 | Critical | 2026-01-13 |
| CVE-2022-50936 | WBCE CMS 代码问题漏洞 — WBCE CMS | 8.8 | High | 2026-01-13 |
| CVE-2022-50916 | e107 代码问题漏洞 — e107 CMS | 7.2 | High | 2026-01-13 |
| CVE-2022-50912 | ImpressCMS 代码问题漏洞 — ImpressCMS | 9.8 | Critical | 2026-01-13 |
| CVE-2022-50907 | e107 代码问题漏洞 — e107 CMS | 7.2 | High | 2026-01-13 |
| CVE-2022-50898 | NanoCMS 代码注入漏洞 — NanoCMS | 8.8 | High | 2026-01-13 |
| CVE-2025-62182 | Pega Customer Service Framework 安全漏洞 — Pega Infinity | 7.2AI | HighAI | 2026-01-13 |
| CVE-2026-0496 | SAP Fiori App Intercompany Balance Reconciliation 代码问题漏洞 — SAP Fiori App (Intercompany Balance Reconciliation) | 6.6 | Medium | 2026-01-13 |
| CVE-2026-22799 | emlog 代码问题漏洞 — emlog | 7.2AI | HighAI | 2026-01-12 |
| CVE-2026-22789 | WebErpMesv2 安全漏洞 — WebErpMesv2 | 5.4 | Medium | 2026-01-12 |
| CVE-2026-22786 | Gin-vue-admin 代码问题漏洞 — gin-vue-admin | 9.8AI | CriticalAI | 2026-01-12 |
| CVE-2026-22783 | Iris 安全漏洞 — iris-web | 9.6 | Critical | 2026-01-12 |
| CVE-2025-15503 | Sangfor Operation and Maintenance Management System 代码问题漏洞 — Operation and Maintenance Management System | 7.3 | High | 2026-01-10 |
| CVE-2025-15495 | BiggiDroid Simple PHP CMS 安全漏洞 — Simple PHP CMS | 4.7 | Medium | 2026-01-09 |
| CVE-2026-22241 | Open eClass 安全漏洞 — openeclass | 7.2 | - | 2026-01-08 |
| CVE-2025-67924 | WordPress plugin Corpkit 安全漏洞 — Corpkit | 9.9 | Critical | 2026-01-08 |
| CVE-2025-67910 | WordPress plugin Contentstudio 安全漏洞 — Contentstudio | 9.1 | Critical | 2026-01-08 |
| CVE-2019-25296 | WordPress plugin WP Cost Estimation 安全漏洞 — WP Cost Estimation & Payment Forms Builder | 9.8 | Critical | 2026-01-08 |
| CVE-2025-15158 | WordPress plugin WP Enable WebP 代码问题漏洞 — WP Enable WebP | 8.8 | High | 2026-01-07 |
| CVE-2025-14842 | WordPress plugin Drag and Drop Multiple File Upload – Contact Form 7 代码问题漏洞 — Drag and Drop Multiple File Upload for Contact Form 7 | 6.1 | Medium | 2026-01-07 |
| CVE-2026-0643 | House Rental and Property Listing 安全漏洞 — House Rental and Property Listing | 7.3 | High | 2026-01-06 |
| CVE-2025-30996 | WordPress多款产品 代码问题漏洞 — Themify Newsy | 9.9 | Critical | 2026-01-06 |
| CVE-2023-50897 | WordPress plugin Media File Renamer 代码问题漏洞 — Media File Renamer | 9.1 | Critical | 2026-01-05 |
| CVE-2025-31048 | WordPress plugin Shopo 代码问题漏洞 — Shopo | 9.9 | Critical | 2026-01-05 |
| CVE-2025-15240 | Quanta QOCA aim AI Medical Cloud Platform 代码问题漏洞 — QOCA aim AI Medical Cloud Platform | 8.8 | High | 2026-01-05 |
| CVE-2025-15448 | mall 代码问题漏洞 — JavaMall | 6.3 | Medium | 2026-01-05 |
CWE-434（危险类型文件的不加限制上传） 是常见的弱点类别，本平台收录该类弱点关联的 2015 条 CVE 漏洞。