| 漏洞ID | 标题 | 厂商 | 产品 | 风险等级 | CVSS 评分 | 发布日期 | AI 分析 |
|---|---|---|---|---|---|---|---|
| CVE-2026-89288 | Fast Courier 5.0.0-5.2.3 wp_order_id参数未授权SQL注入漏洞 | Unknown | Fast Courier | - | - | 2026-10-14 06:00:15 | 深度分析 |
| CVE-2026-92409 | Donation Thermometer 2.2.9-2.2.11 贡献者存储型XSS漏洞 | Unknown | Donation Thermometer | - | - | 2026-10-14 06:00:15 | 深度分析 |
| CVE-2026-92426 | YITH WooCommerce Popup <1.60.0 任意文章元数据删除漏洞 | Unknown | YITH WooCommerce Popup | - | - | 2026-10-14 06:00:15 | 深度分析 |
| CVE-2026-90989 | Tainacan <1.4.0 订阅者+仓库管理员电子邮件地址泄露漏洞 | Unknown | Tainacan | - | - | 2026-10-14 06:00:15 | 深度分析 |
| CVE-2026-91076 | Robokassa for WooCommerce < 1.9.0 未授权任意订单状态篡改漏洞 | Unknown | Robokassa payment gateway for Woocommerce | - | - | 2026-10-14 06:00:15 | 深度分析 |
| CVE-2026-87968 | Product Feed for Google Shopping < 5.3.2 未授权强制店铺注册漏洞 | Unknown | Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant | - | - | 2026-10-14 06:00:14 | 深度分析 |
| CVE-2026-87843 | Trust Payments Gateway for WooCommerce < 3.1.0 未认证订单支付完成漏洞 | Unknown | Trust Payments Gateway for WooCommerce | - | - | 2026-10-14 06:00:14 | 深度分析 |
| CVE-2026-87974 | Asaas Gateway for WooCommerce <2.7.8 未授权订单支付绕过漏洞 | Unknown | Asaas Gateway for WooCommerce | - | - | 2026-10-14 06:00:14 | 深度分析 |
| CVE-2026-88927 | rtMedia <4.7.14 IDOR任意相册媒体注入漏洞 | Unknown | rtMedia for WordPress, BuddyPress and bbPress | - | - | 2026-10-14 06:00:14 | 深度分析 |
| CVE-2026-86799 | Forms <3.0.2 表单提交未认证存储型XSS漏洞 | Unknown | Forms | - | - | 2026-10-14 06:00:14 | 深度分析 |
| CVE-2026-85345 | FV Player 7.5.44.7212 - 7.5.54.7212 贡献者角色SSRF漏洞 | Unknown | FV Flowplayer Video Player | - | - | 2026-10-14 06:00:13 | 深度分析 |
| CVE-2026-85000 | EmbedPress <4.6.8 未授权YouTube API配额消耗及数据库膨胀 | Unknown | EmbedPress | - | - | 2026-10-14 06:00:13 | 深度分析 |
| CVE-2026-86787 | Affiliate Toolkit 3.8.7-3.9.0 Contributor+远程代码执行漏洞 | Unknown | affiliate-toolkit | - | - | 2026-10-14 06:00:13 | 深度分析 |
| CVE-2026-86797 | Pricing Table Block 1.0.7 - 2.1.4 贡献者+存储型XSS漏洞 | Unknown | Pricing Table | - | - | 2026-10-14 06:00:13 | 深度分析 |
| CVE-2026-108064 | WP Encryption <7.8.8.2 未授权私钥泄露及ACME订单替换漏洞 | Unknown | WP Encryption | - | - | 2026-10-14 06:00:12 | 深度分析 |
| CVE-2026-108069 | Sunshine Photo Cart < 3.7.4 未认证内容注入漏洞 | Unknown | Sunshine Photo Cart | - | - | 2026-10-14 06:00:12 | 深度分析 |
| CVE-2026-108066 | WP 2FA <4.2.0 管理越权移除任意用户两步验证漏洞 | Unknown | WP 2FA | - | - | 2026-10-14 06:00:12 | 深度分析 |
| CVE-2026-107594 | File Upload to Order < 1.1.4 未认证任意文件删除漏洞 | Unknown | File Upload to Order | - | - | 2026-10-14 06:00:12 | 深度分析 |
| CVE-2026-107508 | Ultimate Multisite <2.17.2 未授权LFI漏洞 | Unknown | Ultimate Multisite | - | - | 2026-10-14 06:00:12 | 深度分析 |
| CVE-2026-107320 | GamiPress 7.9.5-8.0.5 未授权私有活动日志泄露 | Unknown | GamiPress | - | - | 2026-10-14 06:00:12 | 深度分析 |