| 漏洞ID | 标题 | 厂商 | 产品 | 风险等级 | CVSS 评分 | 发布日期 | AI 分析 |
|---|---|---|---|---|---|---|---|
| CVE-2026-78477 | Jawn <= 1.4.2 未授权权限提升漏洞 | MVPThemes | Jawn | 超危 | 9.8 | 2026-08-25 05:31:29 | 深度分析 |
| CVE-2026-78466 | Fluent Boards Pro <=2.0.11 授权用户不安全的直接对象引用漏洞 | Fluent Boars | Fluent Boards Pro | 中危 | 4.3 | 2026-08-25 05:31:29 | 深度分析 |
| CVE-2026-78470 | WP Project Manager Pro <= 4.0.1 认证SQL注入漏洞 | wedevs | WP Project Manager Pro | 中危 | 6.5 | 2026-08-25 05:31:29 | 深度分析 |
| CVE-2026-78478 | Måne <= 1.7 未授权本地文件包含漏洞 | Elated-Themes | Mane | 高危 | 8.1 | 2026-08-25 05:31:28 | 深度分析 |
| CVE-2026-78467 | Fluent Support Pro <=2.3.1 缺失授权漏洞 | Fluent Support | Fluent Support Pro | 中危 | 4.3 | 2026-08-25 05:31:28 | 深度分析 |
| CVE-2026-78638 | unzip-crx 路径穿越漏洞 | peerigon | unzip-crx | 低危 | 3.3 | 2026-08-25 05:30:09 | 深度分析 |
| CVE-2026-78637 🧪 | node-poppler index.js pdfUnite 参数注入漏洞 | Fdawgs | node-poppler | 高危 | 7.3 | 2026-08-25 04:45:11 | 深度分析 |
| CVE-2026-13215 | Zephyr ext2挂载未验证块大小导致越界写入漏洞 | zephyrproject | zephyr | 中危 | 6.8 | 2026-08-25 04:37:22 | 深度分析 |
| CVE-2026-13214 | OCPP GetConfiguration密钥解析栈缓冲区溢出漏洞 | zephyrproject | zephyr | 超危 | 9.8 | 2026-08-25 04:37:21 | 深度分析 |
| CVE-2026-12561 | tagDiv Composer <=5.4.5 已认证（贡献者+）存储型跨站脚本漏洞 | tagDiv | tagDiv Composer | 中危 | 6.4 | 2026-08-25 04:27:01 | 深度分析 |
| CVE-2026-19943 | Gutenverse 4.0.2 已授权存储型XSS漏洞 | jegstudio | Gutenverse – WordPress Blocks, Page Builder & Site Editor | 中危 | 6.4 | 2026-08-25 03:27:07 | 深度分析 |
| CVE-2026-14280 | Events Manager <= 7.3.7.4 本地文件包含漏洞 | netweblogic | Events Manager – Calendar, Bookings, Tickets, and more! | 中危 | 6.6 | 2026-08-25 03:27:07 | 深度分析 |
| CVE-2026-17089 | Events Manager <= 7.4.0.1 header_format参数反射型XSS漏洞 | netweblogic | Events Manager – Calendar, Bookings, Tickets, and more! | 中危 | 6.1 | 2026-08-25 03:27:07 | 深度分析 |
| CVE-2026-19892 | InfusedWoo Pro <= 5.1.18 特权提升漏洞 | Infused Addons | InfusedWoo Pro | 高危 | 8.8 | 2026-08-25 03:27:06 | 深度分析 |
| CVE-2026-76063 | FundEngine ≤ 1.8.1 存储型XSS漏洞 | roxnor | FundEngine – Donation and Crowdfunding Platform | 中危 | 6.4 | 2026-08-25 03:27:06 | 深度分析 |
| CVE-2026-75930 | FundEngine 1.8.1 订阅者任意文章修改漏洞 | roxnor | FundEngine – Donation and Crowdfunding Platform | 中危 | 4.3 | 2026-08-25 03:27:05 | 深度分析 |
| CVE-2026-75019 | Cozy Blocks <=2.2.16 存储型跨站脚本漏洞 | cozythemes | Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates | 中危 | 6.4 | 2026-08-25 02:26:49 | 深度分析 |
| CVE-2026-75982 | LearnPress <=4.4.4 编辑者权限下未授权更新选项漏洞 | thimpress | LearnPress – WordPress LMS Plugin for Create and Sell Online Courses | 中危 | 4.4 | 2026-08-25 02:26:49 | 深度分析 |
| CVE-2025-9878 | Password Protect WordPress Lite <=1.9.21 存储型XSS漏洞 | buildwps | PPWP – Password Protect Pages | 中危 | 6.4 | 2026-08-25 02:26:49 | 深度分析 |
| CVE-2026-10627 | Events Manager <=7.4.0 未授权访问敏感信息泄露漏洞 | netweblogic | Events Manager – Calendar, Bookings, Tickets, and more! | 中危 | 5.3 | 2026-08-25 02:26:48 | 深度分析 |