| 漏洞ID | 标题 | 厂商 | 产品 | 风险等级 | CVSS 评分 | 发布日期 | AI 分析 |
|---|---|---|---|---|---|---|---|
| CVE-2026-53532 🧪 | OpenEXR HTJ2K解码器拒绝服务漏洞 | AcademySoftwareFoundation | openexr | 高危 | 7.1 | 2026-08-24 22:24:03 | 深度分析 |
| CVE-2026-68516 | OpenEXR HTJ2K SIZ图像偏移漏洞导致栈缓冲区溢出 | AcademySoftwareFoundation | openexr | 中危 | 6.5 | 2026-08-24 22:08:49 | 深度分析 |
| CVE-2026-78435 | Faveo Helpdesk 路径遍历漏洞 | Faveo | Helpdesk | 低危 | 3.8 | 2026-08-24 21:45:11 | 深度分析 |
| CVE-2026-78282 | WordPress Stripe Payments <=2.1.2 跨站脚本漏洞 | mra13 | Stripe Payments | 高危 | 7.1 | 2026-08-24 21:31:36 | 深度分析 |
| CVE-2026-78268 | WordPress SiteLeads插件 <=1.2.0 敏感数据泄露漏洞 | Extend Themes | Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads | 高危 | 7.5 | 2026-08-24 21:31:35 | 深度分析 |
| CVE-2026-78267 🧪 | WordPress TranslatePress插件 <= 3.3.2 权限提升漏洞 | Cozmoslabs | TranslatePress | 超危 | 9.8 | 2026-08-24 21:31:34 | 深度分析 |
| CVE-2026-78266 | WordPress AutomatorWP <=5.8.3 越权访问漏洞 | Ruben Garcia | AutomatorWP | 中危 | 6.5 | 2026-08-24 21:31:34 | 深度分析 |
| CVE-2026-78265 | WordPress Events Calendar插件<=6.17.2 PHP对象注入漏洞 | Nexcess | The Events Calendar | 超危 | 9.8 | 2026-08-24 21:31:33 | 深度分析 |
| CVE-2026-78264 | WordPress Toolset Blocks插件<=1.6.26跨站脚本漏洞 | Site Building with Toolset | Toolset Blocks | 高危 | 7.1 | 2026-08-24 21:31:32 | 深度分析 |
| CVE-2026-78263 | WordPress Event Tickets插件<=5.29.2.1 跨站脚本漏洞 | Nexcess | Event Tickets | 高危 | 7.1 | 2026-08-24 21:31:31 | 深度分析 |
| CVE-2026-78262 | WordPress WP Project Manager插件<=4.0.6 PHP对象注入漏洞 | weDevs | WP Project Manager | 超危 | 9.8 | 2026-08-24 21:31:31 | 深度分析 |
| CVE-2026-78259 | WordPress WPLegalPages 插件 <= 3.7.0 身份验证错误漏洞 | WP Legal Pages | WPLegalPages | 高危 | 7.3 | 2026-08-24 21:31:30 | 深度分析 |
| CVE-2026-32563 | WordPress ACPT <=2.0.63 PHP对象注入漏洞 | A CPT | ACPT (Pro) - Custom Post Types Plugin for WordPress | 超危 | 9.8 | 2026-08-24 21:31:29 | 深度分析 |
| CVE-2026-32561 | WordPress Booking Hub <=1.3.0 权限提升漏洞 | LiquidThemes | Booking Hub | 高危 | 8.8 | 2026-08-24 21:31:29 | 深度分析 |
| CVE-2026-32560 | WordPress MagicAI插件<=1.4 本地文件包含漏洞 | LiquidThemes | MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator | 高危 | 8.8 | 2026-08-24 21:31:28 | 深度分析 |
| CVE-2026-32559 | WordPress UltimateAI插件 <= 3.1.0 任意文件上传漏洞 | tophive | UltimateAI | 超危 | 9.9 | 2026-08-24 21:31:27 | 深度分析 |
| CVE-2026-32555 | WordPress Boost插件 <= 2.0.4 SQL注入漏洞 | PixelYourSite Professional | Boost | 超危 | 9.3 | 2026-08-24 21:31:26 | 深度分析 |
| CVE-2026-32556 | WordPress Boost 插件 <= 2.0.4 跨站脚本漏洞 | PixelYourSite Professional | Boost | 高危 | 7.1 | 2026-08-24 21:31:26 | 深度分析 |
| CVE-2026-32554 | WordPress WooBeWoo Product Filter Pro <= 3.1.8 SQL注入漏洞 | WBW | WooBeWoo Product Filter Pro | 超危 | 9.3 | 2026-08-24 21:31:25 | 深度分析 |
| CVE-2026-27364 | WordPress Style Kits插件 <=2.6.5 访问控制漏洞 | AnalogWP | Style Kits | 中危 | 6.5 | 2026-08-24 21:31:24 | 深度分析 |