目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

designthemes 厂商漏洞列表 / CVE 中文分析 44

designthemes 厂商相关 44 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

DesignThemes 主要提供 WordPress 主题及模板解决方案。截至最新统计，其已收录 38 条 CVE，历史漏洞多集中于跨站脚本（XSS）、远程代码执行（RCE）及不安全的反序列化。部分版本存在未授权访问与文件包含风险，攻击者常利用配置缺陷或输入验证缺失获取系统权限。建议用户及时更新组件并严格实施访问控制，以缓解潜在的安全威胁。

Top products by designthemes: DesignThemes Core Features LMS Reservation Plugin WeDesignTech Ultimate Booking Addon DesignThemes LMS Addon DT LMS – elearning, WordPress LMS Plugin DesignThemes Portfolio Addon WeDesignTech Portfolio Kids Heaven Vivagh OneLife Dental Clinic LMS Elementor Pro DesignThemes Directory Addon DesignThemes Portfolio DesignThemes Booking Manager Kids Life | Children School WordPress Fitness Zone WordPress Theme Trendy Travel SpaLab | Beauty Salon WordPress Theme VEDA - MultiPurpose WordPress Theme Single Property Finance Consultant Pet World Crafts & Arts Red Art Visual Art | Gallery WordPress Theme Invico - WordPress Consulting Business Theme Ofiz - WordPress Business Consulting Theme Knowledge Base
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-11355 DT LMS 1.1 未授权插件设置篡改漏洞 — DT LMS – elearning, WordPress LMS Plugin CWE-862 5.3 Medium 2026-09-12
CVE-2026-27404 Designthemes LMS 跨站脚本漏洞 — LMS CWE-79 7.1 High 2026-07-02
CVE-2026-27402 WordPress Kids Life | Children School WordPress 跨站脚本漏洞 — Kids Life | Children School WordPress CWE-79 7.1 High 2026-07-02
CVE-2025-69155 Designthemes Fitness Zone WordPress Theme 跨站脚本漏洞 — Fitness Zone WordPress Theme CWE-79 7.1 High 2026-07-02
CVE-2025-69154 designthemes Spa Lab 跨站脚本漏洞 — SpaLab | Beauty Salon WordPress Theme CWE-79 7.1 High 2026-07-02
CVE-2025-69153 designthemes Trendy Travel 跨站脚本漏洞 — Trendy Travel CWE-79 7.1 High 2026-07-02
CVE-2026-27983 WordPress plugin LMS Elementor Pro 安全漏洞 — LMS Elementor Pro CWE-266 9.8 Critical 2026-03-05
CVE-2026-27390 WordPress plugin WeDesignTech Ultimate Booking Addon 安全漏洞 — WeDesignTech Ultimate Booking Addon CWE-288 8.8 High 2026-03-05
CVE-2026-27386 WordPress plugin DesignThemes Directory Addon 安全漏洞 — DesignThemes Directory Addon CWE-862 7.5 High 2026-03-05
CVE-2026-27389 WordPress plugin WeDesignTech Ultimate Booking Addon 安全漏洞 — WeDesignTech Ultimate Booking Addon CWE-288 9.8 Critical 2026-03-05
CVE-2026-27385 WordPress plugin DesignThemes Portfolio 跨站脚本漏洞 — DesignThemes Portfolio CWE-79 7.1 High 2026-03-05
CVE-2026-27388 WordPress plugin DesignThemes Booking Manager 安全漏洞 — DesignThemes Booking Manager CWE-862 7.5 High 2026-03-05
CVE-2026-22473 WordPress plugin Dental Clinic 代码问题漏洞 — Dental Clinic CWE-502 8.8 High 2026-03-05
CVE-2025-69302 WordPress plugin DesignThemes Core Features 安全漏洞 — DesignThemes Core Features CWE-79 7.1 High 2026-02-20
CVE-2025-69095 WordPress plugin Reservation Plugin 安全漏洞 — Reservation Plugin CWE-862 6.5 Medium 2026-01-22
CVE-2025-69002 WordPress plugin OneLife 代码问题漏洞 — OneLife CWE-502 8.8 High 2026-01-22
CVE-2025-68899 WordPress plugin Vivagh 代码问题漏洞 — Vivagh CWE-502 8.8 High 2026-01-22
CVE-2025-67619 WordPress plugin Kids Heaven 代码问题漏洞 — Kids Heaven CWE-502 8.8 High 2026-01-22
CVE-2025-68981 WordPress plugin HomeFix Elementor Portfolio 安全漏洞 — HomeFix Elementor Portfolio CWE-862 5.3 Medium 2025-12-30
CVE-2025-68980 WordPress plugin WeDesignTech Portfolio 安全漏洞 — WeDesignTech Portfolio CWE-862 5.3 Medium 2025-12-30
CVE-2025-68982 WordPress plugin DesignThemes LMS Addon 安全漏洞 — DesignThemes LMS Addon CWE-862 5.3 Medium 2025-12-30
CVE-2025-68978 WordPress plugin DesignThemes Core 安全漏洞 — DesignThemes Core CWE-79 6.5 Medium 2025-12-30
CVE-2025-68977 WordPress plugin DesignThemes Portfolio Addon 安全漏洞 — DesignThemes Portfolio Addon CWE-79 6.5 Medium 2025-12-30
CVE-2025-64221 WordPress plugin designthemes Reservation Plugin 安全漏洞 — Reservation Plugin CWE-79 7.1 High 2025-12-18
CVE-2025-13542 WordPress plugin DesignThemes LMS 安全漏洞 — DesignThemes LMS CWE-269 9.8 Critical 2025-12-02
CVE-2025-60234 WordPress plugin Single Property 代码问题漏洞 — Single Property CWE-502 8.8 High 2025-10-22
CVE-2025-60228 WordPress plugin Knowledge Base 代码问题漏洞 — Knowledge Base CWE-502 8.8 High 2025-10-22
CVE-2025-60212 WordPress plugin VEDA 代码问题漏洞 — VEDA CWE-502 8.8 High 2025-10-22
CVE-2025-60215 WordPress plugin Kriya 安全漏洞 — Kriya CWE-502 8.8 High 2025-10-22
CVE-2025-53423 WordPress plugin Triss 跨站脚本漏洞 — Triss CWE-79 7.1 High 2025-10-22

本页汇总了 designthemes 厂商截至目前公开的全部 44 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。