| 漏洞ID | 标题 | 厂商 | 产品 | 风险等级 | CVSS 评分 | 发布日期 | AI 分析 |
|---|---|---|---|---|---|---|---|
| CVE-2026-73791 | HPE NonStop Hpjmeter 缓冲区溢出漏洞 | Hewlett Packard Enterprise | HPE NonStop Hpjmeter | 低危 | 2.0 | 2026-10-14 09:06:32 | 深度分析 |
| CVE-2026-73790 | HPE NonStop iTP WebServer 内存损坏漏洞 | Hewlett Packard Enterprise | HPE NonStop iTP WebServer | 高危 | 8.2 | 2026-10-14 08:43:12 | 深度分析 |
| CVE-2026-14851 | Copart在线计费服务信息泄露漏洞 | Copart | Copart’s online billing service | 超危 | 9.2 | 2026-10-14 08:23:27 | 深度分析 |
| CVE-2026-103671 | EC-CUBE 4 AmazonPay插件外部控制Web参数漏洞 | EC-CUBE CO.,LTD. | AmazonPay V2 Plugin (4.0/4.1 series) | 中危 | 5.3 | 2026-10-14 08:12:14 | 深度分析 |
| CVE-2026-107428 | WordPress Paid Videochat Turnkey Site插件<=7.5.12跨站脚本漏洞 | VideoWhisper.com | Paid Videochat Turnkey Site | 高危 | 7.1 | 2026-10-14 08:00:25 | 深度分析 |
| CVE-2026-92392 | HTTP/2 上传 Use-After-Free 漏洞 | curl | curl | - | - | 2026-10-14 07:46:15 | 深度分析 |
| CVE-2026-107757 | Gallery Custom Links <= 2.3.3 存储型XSS漏洞 | tigroumeow | Gallery Custom Links | 中危 | 4.9 | 2026-10-14 07:43:37 | 深度分析 |
| CVE-2026-104764 | Post Export Import with Media <= 1.17.1 认证管理员PHP对象注入漏洞 | wpazleen | Post Export Import with Media | 高危 | 7.2 | 2026-10-14 07:43:36 | 深度分析 |
| CVE-2026-104909 | Mang Board <=2.4.3 未授权本地文件包含漏洞 | kitae-park | Mang Board | 高危 | 8.1 | 2026-10-14 07:43:36 | 深度分析 |
| CVE-2026-104748 | SimpleForm <= 3.10.0 未授权权限提升漏洞 | wpazleen | SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications | 超危 | 9.8 | 2026-10-14 07:43:36 | 深度分析 |
| CVE-2026-103907 | Jeg Kit for Elementor <=3.2.19 信息泄露漏洞 | jegtheme | Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress | 中危 | 6.5 | 2026-10-14 07:43:35 | 深度分析 |
| CVE-2026-107631 | Complianz <=2.5 通过'uid'参数的未授权存储型XSS漏洞 | davidevalerio | Record of Consent Extension for Complianz | 高危 | 7.2 | 2026-10-14 07:43:35 | 深度分析 |
| CVE-2026-107650 | GeoDirectory <=2.8.190 存储型XSS漏洞 | paoltaia | GeoDirectory – WP Business Directory Plugin and Classified Listings Directory | 中危 | 6.4 | 2026-10-14 07:43:35 | 深度分析 |
| CVE-2026-104761 | Mang Board 2.4.3 存储型跨站脚本漏洞 | kitae-park | Mang Board | 中危 | 6.4 | 2026-10-14 07:43:34 | 深度分析 |
| CVE-2026-107751 | Mang Board <=2.4.3 通过'user_name'参数的未授权存储型XSS漏洞 | kitae-park | Mang Board | 高危 | 7.2 | 2026-10-14 07:43:34 | 深度分析 |
| CVE-2026-107756 | Meow Lightbox <= 5.6.2 存储型XSS漏洞 | tigroumeow | Meow Lightbox | 中危 | 6.4 | 2026-10-14 07:43:34 | 深度分析 |
| CVE-2026-103367 | ShopMagic <= 4.9.0 未授权本地文件包含漏洞 | wpdesk | ShopMagic – email automation for WordPress | 高危 | 8.1 | 2026-10-14 07:43:33 | 深度分析 |
| CVE-2026-110284 | LifterLMS <= 10.3.1 本地文件包含漏洞 | lifterlms | LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | 高危 | 7.5 | 2026-10-14 07:43:33 | 深度分析 |
| CVE-2025-9373 | PeproDev Branches Map <=3.0.1 存储型XSS漏洞 | peprodev | PeproDev Branches Map (Mapify) | 中危 | 6.4 | 2026-10-14 07:43:33 | 深度分析 |
| CVE-2026-103366 | Appointment Booking <=5.7.3 直接对象引用致敏感信息泄露 | latepoint | Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | 高危 | 7.5 | 2026-10-14 07:43:32 | 深度分析 |