目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

Jetmonsters 厂商漏洞列表 / CVE 中文分析 47

Jetmonsters 厂商相关 47 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Jetmonsters 主要提供 Java 应用性能监控服务，其开源组件用于实时追踪系统性能指标。历史漏洞记录显示，该厂商产品曾存在远程代码执行、跨站脚本及越权访问等高风险缺陷，累计收录 CVE 达 35 条。这些漏洞多源于输入验证不足或权限控制逻辑缺陷。建议用户及时更新版本以修复已知安全隐患，确保生产环境稳定性，避免攻击者利用未修补漏洞获取系统控制权或窃取敏感数据。

上位製品 Jetmonsters: Getwid – Gutenberg Blocks JetWidgets For Elementor JetFormBuilder Restaurant Menu by MotoPress Stratum Widgets for Elementor JetFormBuilder — Dynamic Blocks Form Builder Timetable and Event Schedule by MotoPress MotoPress Hotel Booking Hotel Booking Lite MotoPress Appointment Booking Mega Menu Block Getwid Stratum
CVE IDタイトルCVSS深刻度公開日
CVE-2026-28140 WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerability — JetFormBuilderCWE-862 7.5 High2026-08-06
CVE-2026-9180 MotoPress Appointment Booking <= 2.4.4 - Unauthenticated Insecure Direct Object Reference to 'payment_details.booking_id' Parameter — MotoPress Appointment BookingCWE-639 5.3 Medium2026-07-03
CVE-2026-57347 WordPress Hotel Booking Lite plugin <= 6.0.3 - Sensitive Data Exposure vulnerability — Hotel Booking LiteCWE-201 6.5 Medium2026-07-02
CVE-2026-13459 JetFormBuilder <= 3.6.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'context' Parameter — JetFormBuilder — Dynamic Blocks Form BuilderCWE-862 5.3 Medium2026-07-02
CVE-2026-13454 MotoPress Appointment Booking <= 2.4.5 - Authenticated (Staff+) SQL Injection via 's' Parameter — MotoPress Appointment BookingCWE-89 6.5 Medium2026-07-01
CVE-2026-11380 JetWidgets For Elementor <= 1.0.21 - Authenticated (Author+) Stored Cross-Site Scripting via Animated Box 'animation_effect' Setting — JetWidgets For ElementorCWE-79 6.4 Medium2026-07-01
CVE-2026-57644 WordPress Restaurant Menu by MotoPress plugin <= 2.4.10 - SQL Injection vulnerability — Restaurant Menu by MotoPressCWE-89 8.5 High2026-06-26
CVE-2025-63078 WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Broken Access Control vulnerability — Restaurant Menu by MotoPressCWE-862 4.3 Medium2026-06-26
CVE-2026-54196 WordPress JetFormBuilder plugin <= 3.6.1 - Privilege Escalation vulnerability — JetFormBuilderCWE-266 6.8 Medium2026-06-17
CVE-2026-54195 WordPress JetFormBuilder plugin <= 3.6.0.1 - Cross Site Scripting (XSS) vulnerability — JetFormBuilderCWE-79 7.1 High2026-06-17
CVE-2026-9228 Timetable and Event Schedule by MotoPress <= 2.4.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via action_get_event_data Function — Timetable and Event Schedule by MotoPressCWE-639 4.3 Medium2026-05-28
CVE-2026-8684 MotoPress Hotel Booking <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary Booking Notes Modification via mphb_update_booking_notes AJAX Action — MotoPress Hotel BookingCWE-862 5.3 Medium2026-05-22
CVE-2026-32525 WordPress JetFormBuilder plugin <= 3.5.6.1 - Remote Code Execution (RCE) vulnerability — JetFormBuilderCWE-94 9.9 Critical2026-03-25
CVE-2026-4373 JetFormBuilder <= 3.5.6.2 - Unauthenticated Arbitrary File Read via Media Field — JetFormBuilder — Dynamic Blocks Form BuilderCWE-36 7.5 High2026-03-21
CVE-2025-69013 WordPress Stratum plugin <= 1.6.1 - Broken Access Control vulnerability — StratumCWE-862 4.3 Medium2025-12-30
CVE-2025-66078 WordPress Hotel Booking Lite plugin <= 5.2.3 - Remote Code Execution (RCE) vulnerability — Hotel Booking LiteCWE-94 9.1 Critical2025-12-18
CVE-2025-49914 WordPress Restaurant Menu by MotoPress plugin <= 2.4.7 - Sensitive Data Exposure vulnerability — Restaurant Menu by MotoPressCWE-497 6.5 Medium2025-12-18
CVE-2025-11991 JetFormBuilder <= 3.5.3 - Missing Authorization to Unauthenticated Form Generation — JetFormBuilder — Dynamic Blocks Form BuilderCWE-862 5.3 Medium2025-12-16
CVE-2025-8195 JetWidgets For Elementor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets — JetWidgets For ElementorCWE-79 6.4 Medium2025-12-13
CVE-2025-64384 WordPress JetFormBuilder plugin <= 3.5.3 - Broken Access Control vulnerability — JetFormBuilderCWE-862 5.3 Medium2025-11-13
CVE-2025-58252 WordPress Getwid Plugin <= 2.1.2 - Sensitive Data Exposure Vulnerability — GetwidCWE-201 4.3 Medium2025-09-22
CVE-2025-7845 Stratum – Elementor Widgets <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Google Maps and Image Hotspot Widgets — Stratum Widgets for ElementorCWE-79 6.4 Medium2025-08-01
CVE-2025-54038 WordPress Restaurant Menu by MotoPress plugin <= 2.4.6 - Cross Site Request Forgery (CSRF) Vulnerability — Restaurant Menu by MotoPressCWE-352 5.4 Medium2025-07-16
CVE-2025-53990 WordPress JetFormBuilder plugin <= 3.5.1.2 - PHP Object Injection Vulnerability — JetFormBuilderCWE-502 7.2 High2025-07-16
CVE-2025-48258 WordPress Mega Menu Block plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability — Mega Menu BlockCWE-79 6.5 Medium2025-05-19
CVE-2025-30846 WordPress Restaurant Menu by MotoPress plugin <= 2.4.4 - Local File Inclusion vulnerability — Restaurant Menu by MotoPressCWE-98 8.8 High2025-03-27
CVE-2024-13642 Stratum – Elementor Widgets <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image Hotspot Widget — Stratum Widgets for ElementorCWE-79 6.4 Medium2025-01-30
CVE-2024-10316 Stratum – Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates — Stratum Widgets for ElementorCWE-200 4.3 Medium2024-11-21
CVE-2024-10872 Getwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting — Getwid – Gutenberg BlocksCWE-79 6.4 Medium2024-11-20
CVE-2024-10323 JetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload — JetWidgets For ElementorCWE-79 6.4 Medium2024-11-12

本页汇总了 Jetmonsters 厂商截至目前公开的全部 47 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。