目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

ThemeGoods 厂商漏洞列表 / CVE 中文分析 54

ThemeGoods 厂商相关 54 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

ThemeGoods 主要提供 WordPress 主题与插件，旨在丰富网站前端设计与功能扩展。其历史漏洞多集中于跨站脚本（XSS）及未授权访问，部分版本存在远程代码执行风险，常因输入验证缺失或权限控制不严导致。安全社区关注其代码审计透明度，建议用户及时更新以修复已知缺陷，防范潜在的数据泄露与系统入侵风险。

Top products by ThemeGoods: Photography Grand Restaurant Altair Grand Tour PhotoMe Grand Photography Capella Grand Conference Grand Conference Theme Custom Post Type Grand Car Rental Grand Magazine Grand Blog Musico Artale | Wedding Photography WordPress Architecturer Grand Portfolio Avante Grand News Starto Grand Wedding Grand Spa Grand Restaurant Theme Elements for Elementor Craft DotLife Hoteller
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-66652 WordPress Grand Tour 跨站请求伪造漏洞 — Grand Tour CWE-352 5.4 Medium 2026-09-02
CVE-2025-53999 themegoods altair 授权问题漏洞 — Altair CWE-862 6.5 Medium 2026-08-20
CVE-2025-15689 WordPress Capella 权限许可和访问控制问题漏洞 — Capella CWE-266 9.8 Critical 2026-08-20
CVE-2025-15688 Capellaweb Capella SQL注入漏洞 — Capella CWE-89 9.3 Critical 2026-08-20
CVE-2026-65487 ThemeGoods Photography 授权问题漏洞 — Photography CWE-862 5.3 Medium 2026-07-23
CVE-2026-57769 themegoods Grand Photography 跨站脚本漏洞 — Grand Photography CWE-79 7.1 High 2026-07-23
CVE-2026-57770 WordPress Grand Photography 反序列化注入漏洞 — Grand Photography CWE-502 9.8 Critical 2026-07-13
CVE-2025-69152 themegoods Artale | Wedding Photography WordPress 跨站脚本漏洞 — Artale | Wedding Photography WordPress CWE-79 7.1 High 2026-07-02
CVE-2025-68524 themegoods Avante 跨站脚本漏洞 — Avante CWE-79 7.1 High 2026-06-17
CVE-2025-69151 themegoods Grand Car Rental 跨站脚本漏洞 — Grand Car Rental CWE-79 7.1 High 2026-06-16
CVE-2026-39635 WordPress plugin Grand Magazine 跨站请求伪造漏洞 — Grand Magazine CWE-352 5.4 Medium 2026-04-08
CVE-2026-39633 WordPress Plugin Grand Car Rental 跨站请求伪造漏洞 — Grand Car Rental CWE-352 6.5 Medium 2026-04-08
CVE-2026-39632 WordPress plugin Grand Blog 跨站请求伪造漏洞 — Grand Blog CWE-352 6.5 Medium 2026-04-08
CVE-2026-39634 WordPress Plugin Grand Portfolio 跨站请求伪造漏洞 — Grand Portfolio CWE-352 5.4 Medium 2026-04-08
CVE-2026-39603 WordPress plugin Grand Photography 跨站请求伪造漏洞 — Grand Photography CWE-352 5.4 Medium 2026-04-08
CVE-2026-27043 WordPress plugin Photography 代码问题漏洞 — Photography CWE-434 7.2 High 2026-03-19
CVE-2026-27367 WordPress plugin Musico 跨站脚本漏洞 — Musico CWE-79 7.1 High 2026-03-05
CVE-2026-27358 WordPress plugin Architecturer 跨站脚本漏洞 — Architecturer CWE-79 7.1 High 2026-03-05
CVE-2026-27353 WordPress plugin Grand News 跨站脚本漏洞 — Grand News CWE-79 7.1 High 2026-03-05
CVE-2026-27352 WordPress plugin Starto 跨站脚本漏洞 — Starto CWE-79 7.1 High 2026-03-05
CVE-2026-27348 WordPress plugin Photography 跨站脚本漏洞 — Photography CWE-79 7.1 High 2026-03-05
CVE-2026-22417 WordPress plugin Grand Wedding 代码问题漏洞 — Grand Wedding CWE-502 9.8 Critical 2026-03-05
CVE-2026-24949 WordPress plugin PhotoMe 安全漏洞 — PhotoMe CWE-79 7.1 High 2026-02-20
CVE-2026-24943 WordPress plugin Grand Conference 安全漏洞 — Grand Conference CWE-79 7.1 High 2026-02-20
CVE-2025-69370 WordPress plugin Capella 代码问题漏洞 — Capella CWE-502 9.8 Critical 2026-02-20
CVE-2025-69301 WordPress plugin PhotoMe 代码问题漏洞 — PhotoMe CWE-502 9.8 Critical 2026-02-20
CVE-2026-23542 WordPress plugin Grand Restaurant 安全漏洞 — Grand Restaurant CWE-502 9.8 Critical 2026-02-19
CVE-2026-24961 WordPress plugin Grand Blog 安全漏洞 — Grand Blog CWE-918 5.4 Medium 2026-02-03
CVE-2026-24381 WordPress plugin PhotoMe 安全漏洞 — PhotoMe CWE-918 5.4 Medium 2026-01-22
CVE-2025-69320 WordPress plugin Grand Magazine 跨站脚本漏洞 — Grand Magazine CWE-79 7.1 High 2026-01-22

本页汇总了 ThemeGoods 厂商截至目前公开的全部 54 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。