目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

Fahad Mahmood 厂商漏洞列表 / CVE 中文分析 26

Fahad Mahmood 厂商相关 26 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。

Fahad Mahmood 主要涉及软件开发与开源项目贡献,其名下代码库累计收录 25 条 CVE。历史漏洞多集中于输入验证缺失导致的跨站脚本(XSS)及逻辑缺陷引发的越权访问,部分案例涉及远程代码执行风险。值得关注的是,其项目缺乏统一的安全响应机制,漏洞修复周期波动较大,且未公开明确的安全披露政策,建议使用者定期审查依赖版本并实施严格的输入过滤策略以降低潜在攻击面。

CVE ID标题CVSS风险等级Published
CVE-2026-57419 WordPress Stock Locations for WooCommerce 授权问题漏洞 — Stock Locations for WooCommerceCWE-862 6.5 Medium2026-07-13
CVE-2026-25332 WordPress plugin Endless Posts Navigation 安全漏洞 — Endless Posts NavigationCWE-862 5.3 Medium2026-02-19
CVE-2026-24990 WordPress plugin WP Docs 安全漏洞 — WP DocsCWE-862 5.4 Medium2026-02-03
CVE-2025-69349 WordPress plugin RSS Feed Widget 安全漏洞 — RSS Feed WidgetCWE-862 5.4 Medium2026-01-06
CVE-2025-62078 WordPress plugin Easy Upload Files During Checkout 安全漏洞 — Easy Upload Files During CheckoutCWE-862 4.3 Medium2025-12-31
CVE-2025-47463 WordPress plugin Stock Locations for WooCommerce 安全漏洞 — Stock Locations for WooCommerceCWE-862 7.1 High2025-06-09
CVE-2025-30999 WordPress plugin WP Shopify 安全漏洞 — External Store for ShopifyCWE-98 7.5 High2025-06-06
CVE-2025-31089 WordPress plugin Order Splitter for WooCommerce SQL注入漏洞 — Order Splitter for WooCommerceCWE-89 8.5 High2025-04-01
CVE-2025-31417 WordPress plugin WP Docs 安全漏洞 — WP DocsCWE-862 4.3 Medium2025-03-31
CVE-2025-26751 WordPress plugin Alphabetic Pagination 跨站脚本漏洞 — Alphabetic PaginationCWE-79 7.1 High2025-02-25
CVE-2025-26779 WordPress plugin Keep Backup Daily 路径遍历漏洞 — Keep Backup DailyCWE-22 4.9 Medium2025-02-16
CVE-2024-56288 WordPress plugin WP Docs 跨站脚本漏洞 — WP DocsCWE-79 5.9 Medium2025-01-07
CVE-2024-56223 WordPress plugin Gulri Slider 跨站脚本漏洞 — Gulri SliderCWE-79 7.1 High2024-12-31
CVE-2024-54344 WordPress plugin WP Quick Shop 跨站脚本漏洞 — WP Quick ShopCWE-79 7.1 High2024-12-13
CVE-2023-32574 WordPress plugin Injection Guard 安全漏洞 — Injection GuardCWE-862 4.3 Medium2024-12-13
CVE-2023-30873 WordPress plugin WP Docs 安全漏洞 — WP DocsCWE-862 5.4 Medium2024-12-09
CVE-2024-47321 WordPress plugin WP Datepicker 安全漏洞 — WP DatepickerCWE-862 6.5 Medium2024-11-01
CVE-2024-49629 WordPress plugin Endless Posts Navigation 跨站请求伪造漏洞 — Endless Posts NavigationCWE-352 7.1 High2024-10-20
CVE-2024-48024 WordPress plugin Keep Backup Daily 安全漏洞 — Keep Backup DailyCWE-497 7.5 High2024-10-17
CVE-2024-44042 WordPress plugin WP Datepicker 跨站脚本漏洞 — WP DatepickerCWE-79 5.9 Medium2024-10-06
CVE-2024-31294 WordPress plugin WP Sort Order 安全漏洞 — WP Sort OrderCWE-862 4.3 Medium2024-06-09
CVE-2024-35695 WordPress plugin WP Docs 跨站脚本漏洞 — WP DocsCWE-79 6.5 Medium2024-06-08
CVE-2024-35696 WordPress plugin WP Docs 跨站脚本漏洞 — WP DocsCWE-79 7.1 High2024-06-08
CVE-2024-32690 WordPress plugin RSS Feed Widget 安全漏洞 — RSS Feed WidgetCWE-79 5.9 Medium2024-04-22
CVE-2023-32106 WordPress plugin WP Docs 跨站脚本漏洞 — WP DocsCWE-79 7.1 High2023-08-18
CVE-2022-44736 WordPress plugin Chameleon 跨站脚本漏洞 — Chameleon (WordPress plugin)CWE-79 4.8 Medium2022-11-17

本页汇总了 Fahad Mahmood 厂商截至目前公开的全部 26 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。