目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

WPFactory 厂商漏洞列表 / CVE 中文分析 48

WPFactory 厂商相关 48 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

WPFactory 主要提供 WordPress 插件及主题开发服务。其产品历史上频繁出现远程代码执行、跨站脚本及越权访问等高危漏洞，累计已收录 47 条 CVE。这些缺陷多源于输入验证缺失或权限控制不严，导致攻击者可轻易获取服务器控制权或窃取用户数据。鉴于其代码复用特性，单一漏洞往往影响多个下游站点，建议用户及时更新并严格审查第三方组件的安全性。

件 2 件の結果 / 48フィルターをクリア
上位製品 WPFactory: Wishlist for WooCommerce Products, Order & Customers Export for WooCommerce EAN for WooCommerce Advanced WooCommerce Product Sales Reporting Additional Custom Product Tabs for WooCommerce Helpdesk Support Ticket System for WooCommerce Product XML Feed Manager for WooCommerce Min Max Step Quantity Limits Manager for WooCommerce Free Shipping Bar: Amount Left for Free Shipping for WooCommerce Adverts Back Button Widget Cost of Goods for WooCommerce Sitewide Discount for WooCommerce: Apply Discount to All Products Maximum Products per User for WooCommerce Slugs Manager CRM ERP Business Solution Email Verification for WooCommerce Coupons & Add to Cart by URL Links for WooCommerce Product Notes Tab & Private Admin Notes for WooCommerce EU/UK VAT Manager for WooCommerce Additional Custom Emails & Recipients for WooCommerce Change Add to Cart Button Text for WooCommerce WP Currency Exchange Rates Custom Checkout Fields for WooCommerce Product Excel Import Export & Bulk Edit for WooCommerce MSRP (RRP) Pricing for WooCommerce Custom CSS, JS & PHP WPFactory Helper Awesome Shortcodes Quantity Dynamic Pricing & Bulk Discounts for WooCommerce
CVE IDタイトルCVSS深刻度公開日
CVE-2025-48252 WordPress Back Button Widget plugin <= 1.6.8 - Cross Site Scripting (XSS) Vulnerability — Back Button WidgetCWE-79 6.5 Medium2025-05-19
CVE-2023-51399 WordPress Back Button Widget Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS) — Back Button WidgetCWE-79 6.5 Medium2023-12-29

本页汇总了 WPFactory 厂商截至目前公开的全部 48 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。