目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

Saad Iqbal 厂商漏洞列表 / CVE 中文分析 46

Saad Iqbal 厂商相关 46 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Saad Iqbal 主要涉及软件开发与开源项目维护，其名下代码库累计收录 37 条 CVE。历史漏洞多集中于输入验证缺失导致的远程代码执行及跨站脚本攻击，部分案例涉及身份认证绕过。近期安全事件显示，缺乏严格的访问控制机制是主要风险源。建议开发者定期更新依赖组件，强化输入过滤与权限校验，以缓解潜在的安全威胁，确保系统稳定性。

上位製品 Saad Iqbal: myCred Post SMTP New User Approve WP EasyPay APIExperts Square for WooCommerce AppExperts License Manager for WooCommerce User Management Quick Contact Form Post Snippets Advanced File Manager Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder User Avatar - Reloaded All In One Login Bookify Gutena Kit – Gutenberg Blocks and Templates myCred Elementor WPExperts Square For GiveWP
CVE IDタイトルCVSS深刻度公開日
CVE-2026-66425 WordPress Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin <= 1.9.0 - Broken Authentication vulnerability — Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form BuilderCWE-288 6.5 Medium2026-08-06
CVE-2026-57808 WordPress WP EasyPay plugin <= 4.5.0 - Arbitrary Content Deletion vulnerability — WP EasyPayCWE-862 6.5 Medium2026-07-23
CVE-2026-57810 WordPress APIExperts Square for WooCommerce plugin <= 4.7.4 - SQL Injection vulnerability — APIExperts Square for WooCommerceCWE-89 8.5 High2026-07-13
CVE-2026-61968 WordPress myCred plugin <= 3.1.2 - Broken Access Control vulnerability — myCredCWE-862 5.4 Medium2026-07-13
CVE-2026-61958 WordPress License Manager for WooCommerce plugin <= 3.0.17 - Arbitrary Content Deletion vulnerability — License Manager for WooCommerceCWE-862 5.4 Medium2026-07-13
CVE-2026-54848 WordPress APIExperts Square for WooCommerce plugin <= 4.7.3 - Sensitive Data Exposure vulnerability — APIExperts Square for WooCommerceCWE-201 8.3 High2026-06-25
CVE-2026-56024 WordPress WP EasyPay plugin <= 4.5.0 - Cross Site Request Forgery (CSRF) vulnerability — WP EasyPayCWE-352 6.5 Medium2026-06-18
CVE-2026-45215 WordPress WP EasyPay plugin <= 4.3.0 - Sensitive Data Exposure vulnerability — WP EasyPayCWE-201 5.3 Medium2026-05-12
CVE-2026-45211 WordPress APIExperts Square for WooCommerce plugin <= 4.7.1 - SQL Injection vulnerability — APIExperts Square for WooCommerceCWE-89 8.5 High2026-05-12
CVE-2026-25390 WordPress New User Approve plugin <= 3.2.3 - Broken Access Control vulnerability — New User ApproveCWE-862 6.5 Medium2026-03-25
CVE-2026-25001 WordPress Post Snippets plugin <= 4.0.12 - Remote Code Execution (RCE) vulnerability — Post SnippetsCWE-94 8.5 High2026-03-25
CVE-2026-32587 WordPress WP EasyPay plugin <= 4.2.11 - Broken Access Control vulnerability — WP EasyPayCWE-862 5.4 Medium2026-03-16
CVE-2025-69063 WordPress New User Approve plugin <= 3.2.0 - Broken Access Control vulnerability — New User ApproveCWE-862 8.6 High2026-02-20
CVE-2026-27440 WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability — myCredCWE-79 6.5 Medium2026-02-19
CVE-2026-24951 WordPress myCred plugin <= 2.9.7.3 - Broken Access Control vulnerability — myCredCWE-862 4.3 Medium2026-02-03
CVE-2025-68881 WordPress AppExperts plugin <= 1.4.5 - SQL Injection vulnerability — AppExpertsCWE-89 8.5 High2026-01-22
CVE-2025-63040 WordPress Post Snippets plugin <= 4.0.11 - Cross Site Request Forgery (CSRF) vulnerability — Post SnippetsCWE-352 4.3 Medium2025-12-31
CVE-2025-68080 WordPress User Avatar - Reloaded plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability — User Avatar - ReloadedCWE-79 6.5 Medium2025-12-16
CVE-2025-63030 WordPress New User Approve plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability — New User ApproveCWE-352 7.1 High2025-12-09
CVE-2025-67563 WordPress Post SMTP plugin <= 3.6.1 - Broken Access Control vulnerability — Post SMTPCWE-862 5.3 Medium2025-12-09
CVE-2025-67471 WordPress Quick Contact Form plugin <= 8.2.5 - Cross Site Request Forgery (CSRF) vulnerability — Quick Contact FormCWE-352 4.3 Medium2025-12-09
CVE-2025-58595 WordPress All In One Login plugin <= 2.0.8 - Bypass Vulnerability vulnerability — All In One LoginCWE-290 5.3 Medium2025-11-06
CVE-2025-53218 WordPress AppExperts plugin <= 1.4.5 - Sensitive Data Exposure vulnerability — AppExpertsCWE-201 5.8 Medium2025-10-22
CVE-2025-58788 WordPress License Manager for WooCommerce Plugin <= 3.0.12 - SQL Injection Vulnerability — License Manager for WooCommerceCWE-89 7.6 High2025-09-05
CVE-2025-48142 WordPress Bookify <= 1.0.9 - Privilege Escalation Vulnerability — BookifyCWE-266 8.8 High2025-08-20
CVE-2025-54668 WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability — myCredCWE-79 6.5 Medium2025-08-14
CVE-2025-54667 WordPress myCred plugin <= 2.9.4.3 - Race Condition Vulnerability — myCredCWE-367 5.3 Medium2025-08-14
CVE-2025-24000 WordPress Post SMTP plugin <= 3.2.0 - Account Takeover Vulnerability — Post SMTPCWE-288 8.8 High2025-08-07
CVE-2025-49857 WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability — myCredCWE-862 4.3 Medium2025-06-17
CVE-2025-49872 WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability — myCredCWE-862 5.3 Medium2025-06-17

本页汇总了 Saad Iqbal 厂商截至目前公开的全部 46 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。