| 漏洞ID | 标题 | 厂商 | 产品 | 风险等级 | CVSS 评分 | 发布日期 | AI 分析 |
|---|---|---|---|---|---|---|---|
| CVE-2026-104759 | WPO365 <=44.1 OIDC非认证绕过漏洞 | wpo365 | WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) | 高危 | 8.1 | 2026-10-10 07:41:47 | 深度分析 |
| CVE-2026-100178 | WPAdverts <= 2.3.4 存储型XSS漏洞 | gwin | WPAdverts – Classifieds Plugin | 高危 | 7.2 | 2026-10-10 07:41:46 | 深度分析 |
| CVE-2026-96653 | WP Directory Kit 1.5.9 有序SQL注入漏洞 | wpdirectorykit | WP Directory Kit | 中危 | 6.5 | 2026-10-10 07:41:46 | 深度分析 |
| CVE-2026-104803 | WPCOM Member ≤1.7.27 未授权认证绕过漏洞 | whyun | WPCOM Member | 超危 | 9.8 | 2026-10-10 07:41:45 | 深度分析 |
| CVE-2026-96765 | WPO365 <= 44.1 存储型XSS漏洞 | wpo365 | WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) | 高危 | 7.2 | 2026-10-10 07:41:45 | 深度分析 |
| CVE-2026-97396 | WordPress Email Marketing插件<=1.0.10存储型XSS漏洞 | retainful | Email Marketing for WordPress and WooCommerce – Retainful | 中危 | 6.4 | 2026-10-10 07:41:45 | 深度分析 |
| CVE-2026-101920 | Molongui Authorship <= 5.2.12 未授权存储型DOM跨站脚本漏洞 | molongui | Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress | 高危 | 7.2 | 2026-10-10 07:41:44 | 深度分析 |
| CVE-2026-101921 | WPForms <= 2.0.2.1 iframe srcdoc属性反射型XSS漏洞 | smub | WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More | 中危 | 4.7 | 2026-10-10 07:41:44 | 深度分析 |
| CVE-2026-96662 | Appointment Booking插件<=5.7.2未授权SQL注入漏洞 | latepoint | Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | 高危 | 7.5 | 2026-10-10 07:41:44 | 深度分析 |
| CVE-2026-100147 | FunnelKit <= 3.16.0.5 订单字段未授权存储型XSS漏洞 | teamfunnelkit | FunnelKit – Funnel Builder for WooCommerce Checkout | 高危 | 7.2 | 2026-10-10 07:41:43 | 深度分析 |
| CVE-2026-96563 | Motors <=1.4.123 存储型跨站脚本漏洞 | stylemix | Motors – Car Dealership & Classified Listings Plugin | 中危 | 6.4 | 2026-10-10 07:41:43 | 深度分析 |
| CVE-2026-96278 | WP Photo Album Plus 9.3.03.002 未授权存储型XSS漏洞 | opajaap | WP Photo Album Plus | 高危 | 7.2 | 2026-10-10 07:41:42 | 深度分析 |
| CVE-2026-108504 | ZTE Z80 Ultra 未授权信息检索漏洞 | ZTE | Z80 Ultra | 中危 | 5.5 | 2026-10-10 07:19:21 | 深度分析 |
| CVE-2026-93945 | WordPress Balance主题<=1.12.0 PHP对象注入漏洞 | Axiomthemes | Balance | 超危 | 9.8 | 2026-10-10 07:00:39 | 深度分析 |
| CVE-2026-62046 | WordPress Gutentype 主题 <= 2.1.12 PHP对象注入漏洞 | ThemeREX Group | Gutentype | 超危 | 9.8 | 2026-10-10 07:00:39 | 深度分析 |
| CVE-2026-62045 | WordPress Booklovers主题<=2.13.0 PHP对象注入漏洞 | ThemeREX Group | Booklovers | 超危 | 9.8 | 2026-10-10 07:00:39 | 深度分析 |
| CVE-2026-93943 | WordPress Convex主题1.16.0及以下PHP对象注入漏洞 | ThemeREX Group | Convex | 超危 | 9.8 | 2026-10-10 07:00:38 | 深度分析 |
| CVE-2026-93941 | WordPress Edema主题<=1.2.2.2 PHP对象注入漏洞 | ThemeREX Group | Edema | 超危 | 9.8 | 2026-10-10 07:00:38 | 深度分析 |
| CVE-2026-93944 | WordPress Camelia主题 <= 1.2.15 PHP对象注入漏洞 | ThemeREX Group | Camelia | 超危 | 9.8 | 2026-10-10 07:00:38 | 深度分析 |
| CVE-2026-93940 | WordPress Greeny主题2.10.0及以下版本 PHP对象注入漏洞 | ThemeREX Group | Greeny | 超危 | 9.8 | 2026-10-10 07:00:38 | 深度分析 |