目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

WPFactory 厂商漏洞列表 / CVE 中文分析 48

WPFactory 厂商相关 48 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

WPFactory 主要提供 WordPress 插件及主题开发服务。其产品历史上频繁出现远程代码执行、跨站脚本及越权访问等高危漏洞，累计已收录 47 条 CVE。这些缺陷多源于输入验证缺失或权限控制不严，导致攻击者可轻易获取服务器控制权或窃取用户数据。鉴于其代码复用特性，单一漏洞往往影响多个下游站点，建议用户及时更新并严格审查第三方组件的安全性。

Top products by WPFactory: Wishlist for WooCommerce Products, Order & Customers Export for WooCommerce EAN for WooCommerce Advanced WooCommerce Product Sales Reporting Additional Custom Product Tabs for WooCommerce Helpdesk Support Ticket System for WooCommerce Product XML Feed Manager for WooCommerce Min Max Step Quantity Limits Manager for WooCommerce Free Shipping Bar: Amount Left for Free Shipping for WooCommerce Adverts Back Button Widget Cost of Goods for WooCommerce Sitewide Discount for WooCommerce: Apply Discount to All Products Maximum Products per User for WooCommerce Slugs Manager CRM ERP Business Solution Email Verification for WooCommerce Coupons & Add to Cart by URL Links for WooCommerce Product Notes Tab & Private Admin Notes for WooCommerce EU/UK VAT Manager for WooCommerce Additional Custom Emails & Recipients for WooCommerce Change Add to Cart Button Text for WooCommerce WP Currency Exchange Rates Custom Checkout Fields for WooCommerce Product Excel Import Export & Bulk Edit for WooCommerce MSRP (RRP) Pricing for WooCommerce Custom CSS, JS & PHP WPFactory Helper Awesome Shortcodes Quantity Dynamic Pricing & Bulk Discounts for WooCommerce
CVE ID 标题 CVSS 风险等级 Published
CVE-2025-31553 WordPress plugin Advanced WooCommerce Product Sales Reporting SQL注入漏洞 — Advanced WooCommerce Product Sales Reporting CWE-89 9.3 Critical 2025-04-01
CVE-2025-31848 WordPress plugin WordPress Adverts Plugin 安全漏洞 — Adverts CWE-862 5.3 Medium 2025-04-01
CVE-2025-31598 WordPress plugin Quantity Dynamic Pricing & Bulk Discounts for WooCommerce 跨站脚本漏洞 — Quantity Dynamic Pricing & Bulk Discounts for WooCommerce CWE-79 6.5 Medium 2025-03-31
CVE-2025-22673 WordPress plugin EAN for WooCommerce 安全漏洞 — EAN for WooCommerce CWE-862 4.3 Medium 2025-03-27
CVE-2025-30781 WordPress plugin Scheduled & Automatic Order Status Controller for WooCommerce 输入验证错误漏洞 — Scheduled & Automatic Order Status Controller for WooCommerce CWE-601 4.7 Medium 2025-03-27
CVE-2024-56228 WordPress plugin Wishlist for WooCommerce 跨站脚本漏洞 — Wishlist for WooCommerce CWE-79 7.1 High 2024-12-31
CVE-2024-54332 WordPress plugin WP Currency Exchange Rates 跨站请求伪造漏洞 — WP Currency Exchange Rates CWE-352 7.1 High 2024-12-16
CVE-2023-23868 WordPress plugin Cost of Goods for WooCommerce 安全漏洞 — Cost of Goods for WooCommerce CWE-862 5.4 Medium 2024-12-09
CVE-2024-54209 WordPress plugin Awesome Shortcodes 跨站脚本漏洞 — Awesome Shortcodes CWE-79 7.1 High 2024-12-06
CVE-2024-44061 WordPress plugin EU/UK VAT Manager for WooCommerce 安全漏洞 — EU/UK VAT Manager for WooCommerce CWE-79 7.1 High 2024-10-20
CVE-2024-49305 WordPress plugin Email Verification for WooCommerce SQL注入漏洞 — Email Verification for WooCommerce CWE-89 9.3 Critical 2024-10-17
CVE-2024-43127 WordPress plugin Products, Order & Customers Export for WooCommerce 跨站脚本漏洞 — Products, Order & Customers Export for WooCommerce CWE-79 7.1 High 2024-08-12
CVE-2024-31276 WordPress plugin Products, Order & Customers Export for WooCommerce 安全漏洞 — Products, Order & Customers Export for WooCommerce CWE-862 5.3 Medium 2024-06-09
CVE-2024-34370 WordPress plugin EAN for WooCommerce 安全漏洞 — EAN for WooCommerce CWE-269 7.2 High 2024-05-17
CVE-2024-30536 WordPress Plugin Slugs Manager 跨站请求伪造漏洞 — Slugs Manager CWE-352 4.3 Medium 2024-03-31
CVE-2023-51399 WordPress Plugin Back Button Widget 跨站脚本漏洞 — Back Button Widget CWE-79 6.5 Medium 2023-12-29
CVE-2023-47547 WordPress Plugin Products, Order & Customers Export for WooCommerce安全漏洞 — Products, Order & Customers Export for WooCommerce CWE-79 7.1 High 2023-11-14
CVE-2023-36689 WordPress plugin WPFactory WPFactory Helper 跨站脚本漏洞 — WPFactory Helper CWE-79 7.1 High 2023-08-05

本页汇总了 WPFactory 厂商截至目前公开的全部 48 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。