目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

Themefic 厂商漏洞列表 / CVE 中文分析 50

Themefic 厂商相关 50 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Themefic 主要提供网站主题与模板服务，其开源组件在安全审计中暴露出显著风险。截至最新统计，已收录 36 条 CVE，漏洞类型集中表现为远程代码执行、跨站脚本及权限绕过等常见 Web 安全问题。这些缺陷多源于输入验证缺失或配置不当，反映出开发过程中对安全编码规范的忽视。建议用户及时更新版本并实施严格的访问控制，以降低潜在的攻击面。

Top products by Themefic: Tourfic Hydra Booking Ultimate Addons for Contact Form 7 Ultra Addons for Contact Form 7 Hydra Booking — Appointment Scheduling & Booking Calendar Tourfic – Travel Booking, Hotel Booking & Car Rental WordPress Plugin Travelfic Toolkit Instantio BEAF Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings Ultra Addons for WPForms Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin
CVE ID 标题 CVSS 风险等级 Published
CVE-2025-6212 WordPress plugin Ultra Addons for Contact Form 跨站脚本漏洞 — Ultra Addons for Contact Form 7 CWE-79 7.2 High 2025-06-26
CVE-2025-6220 WordPress plugin Ultra Addons for Contact Form 代码问题漏洞 — Ultra Addons for Contact Form 7 CWE-434 7.2 High 2025-06-18
CVE-2025-49323 WordPress plugin Hydra Booking SQL注入漏洞 — Hydra Booking CWE-89 8.5 High 2025-06-06
CVE-2025-47550 WordPress plugin Instantio 代码问题漏洞 — Instantio CWE-434 6.6 Medium 2025-05-07
CVE-2025-47549 WordPress plugin BEAF 代码问题漏洞 — BEAF CWE-434 9.1 Critical 2025-05-07
CVE-2025-24581 WordPress plugin Instantio 安全漏洞 — Instantio CWE-862 6.5 Medium 2025-04-17
CVE-2025-39585 WordPress plugin Travelfic Toolkit 跨站脚本漏洞 — Travelfic Toolkit CWE-79 6.5 Medium 2025-04-16
CVE-2025-24650 WordPress plugin Tourfic 代码问题漏洞 — Tourfic CWE-434 9.1 Critical 2025-01-24
CVE-2023-47693 WordPress plugin Ultimate Addons for Contact Form 安全漏洞 — Ultimate Addons for Contact Form 7 CWE-862 7.5 High 2025-01-02
CVE-2024-12032 WordPress plugin Tourfic SQL注入漏洞 — Tourfic – Travel Booking, Hotel Booking & Car Rental WordPress Plugin CWE-89 6.5 Medium 2024-12-25
CVE-2024-8319 WordPress plugin Tourfic 跨站请求伪造漏洞 — Tourfic – Travel Booking, Hotel Booking & Car Rental WordPress Plugin CWE-352 4.3 Medium 2024-08-30
CVE-2024-32433 WordPress Plugin Ultimate Before After Image Slider & Gallery 跨站请求伪造漏洞 — BEAF CWE-352 4.3 Medium 2024-04-15
CVE-2024-29134 WordPress Plugin Tourfic 跨站脚本漏洞 — Tourfic CWE-79 6.5 Medium 2024-03-19
CVE-2024-29135 WordPress Plugin Tourfic 代码问题漏洞 — Tourfic CWE-434 9.9 Critical 2024-03-19
CVE-2024-29136 WordPress Plugin Tourfic 代码问题漏洞 — Tourfic CWE-502 8.5 High 2024-03-19
CVE-2024-29137 WordPress Plugin Tourfic 跨站脚本漏洞 — Tourfic CWE-79 7.1 High 2024-03-19
CVE-2023-30495 WordPress Plugin Ultimate Addons for Contact Form 7 SQL注入漏洞 — Ultimate Addons for Contact Form 7 CWE-89 8.5 High 2023-12-20
CVE-2023-49766 WordPress Plugin Ultimate Addons for Contact Form 7 跨站脚本漏洞 — Ultimate Addons for Contact Form 7 CWE-79 7.1 High 2023-12-14
CVE-2023-30493 WordPress plugin Ultimate Addons for Contact Form 跨站脚本漏洞 — Ultimate Addons for Contact Form 7 CWE-79 7.1 High 2023-09-27
CVE-2022-47586 WordPress plugin Ultimate Addons for Contact Form 7 SQL注入漏洞 — Ultimate Addons for Contact Form 7 CWE-89 8.2 High 2023-06-19

本页汇总了 Themefic 厂商截至目前公开的全部 50 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。