roxnor 厂商相关 92 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
Roxy-WAF 是一款基于 Nginx 的 Web 应用防火墙，旨在为后端服务提供安全防护。其历史漏洞多涉及越权访问、命令注入及跨站脚本攻击，部分版本存在配置缺陷导致防护失效。尽管作为开源项目，其代码审计与更新机制曾引发安全社区关注，建议用户及时升级至最新稳定版以修复已知风险，确保部署环境的完整性与机密性。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-14059 | WordPress plugin EmailKit 安全漏洞 — EmailKit – Email Customizer for WooCommerce & WP CWE-73 | 6.5 | Medium | 2026-01-07 |
| CVE-2025-14441 | WordPress plugin Popupkit 安全漏洞 — Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers CWE-862 | 4.3 | Medium | 2026-01-06 |
| CVE-2025-69026 | WordPress plugin PopupKit 安全漏洞 — PopupKit CWE-497 | 4.3 | Medium | 2025-12-30 |
| CVE-2025-14314 | WordPress plugin PopupKit 安全漏洞 — PopupKit CWE-89 | 8.5 | High | 2025-12-18 |
| CVE-2025-63057 | WordPress plugin Wp Ultimate Review 安全漏洞 — Wp Ultimate Review CWE-79 | 6.5 | Medium | 2025-12-09 |
| CVE-2025-13620 | WordPress plugin Wp Social Login and Register Social Counter 安全漏洞 — Wp Social Login and Register Social Counter CWE-862 | 5.3 | Medium | 2025-12-05 |
| CVE-2025-12358 | WordPress plugin ShopEngine Elementor WooCommerce Builder Addon 跨站请求伪造漏洞 — ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution CWE-352 | 4.3 | Medium | 2025-12-03 |
| CVE-2025-11888 | WordPress plugin ShopEngine Elementor WooCommerce Builder Addon 安全漏洞 — ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution CWE-863 | 2.7 | Low | 2025-10-25 |
| CVE-2025-10861 | WordPress plugin Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers 安全漏洞 — Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers CWE-918 | 7.5 | High | 2025-10-24 |
| CVE-2025-10862 | WordPress plugin Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers SQL注入漏洞 — Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers CWE-89 | 7.5 | High | 2025-10-09 |
| CVE-2025-60106 | WordPress plugin EmailKit 安全漏洞 — EmailKit CWE-862 | 4.9 | Medium | 2025-09-26 |
| CVE-2025-10173 | WordPress plugin ShopEngine Elementor WooCommerce Builder Addon 安全漏洞 — ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution CWE-862 | 2.7 | Low | 2025-09-26 |
| CVE-2025-48302 | WordPress plugin FundEngine 安全漏洞 — FundEngine CWE-98 | 7.5 | High | 2025-08-20 |
| CVE-2025-5684 | WordPress plugin MetForm 跨站脚本漏洞 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor CWE-79 | 6.4 | Medium | 2025-07-29 |
| CVE-2025-3614 | WordPress plugin ElementsKit Elementor Addons and Templates 跨站脚本漏洞 — ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor CWE-79 | 6.4 | Medium | 2025-07-24 |
| CVE-2025-4479 | WordPress plugin ElementsKit Elementor Addons and Templates 跨站脚本漏洞 — ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor CWE-79 | 6.4 | Medium | 2025-06-19 |
| CVE-2025-47459 | WordPress plugin WP Fundraising Donation and Crowdfunding Platform 跨站请求伪造漏洞 — FundEngine CWE-352 | 4.3 | Medium | 2025-05-07 |
| CVE-2024-11180 | WordPress plugin ElementsKit Elementor addons 跨站脚本漏洞 — ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor CWE-79 | 6.4 | Medium | 2025-03-29 |
| CVE-2025-30914 | WordPress plugin Metform 代码问题漏洞 — Metform CWE-918 | 4.4 | Medium | 2025-03-27 |
| CVE-2025-1506 | WordPress plugin Wp Social Login and Register Social Counter 跨站请求伪造漏洞 — Wp Social Login and Register Social Counter CWE-352 | 4.3 | Medium | 2025-02-28 |
| CVE-2025-0968 | WordPress plugin ElementsKit Elementor addons 访问控制错误漏洞 — ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor CWE-284 | 5.3 | Medium | 2025-02-19 |
| CVE-2025-1005 | WordPress plugin ElementsKit Elementor addons 跨站脚本漏洞 — ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor CWE-79 | 6.4 | Medium | 2025-02-15 |
| CVE-2023-50903 | WordPress plugin Metform Elementor Contact Form Builder 安全漏洞 — Metform CWE-862 | 5.3 | Medium | 2024-12-09 |
| CVE-2024-37255 | WordPress plugin Elements kit Elementor addons 安全漏洞 — ElementsKit Elementor addons Lite CWE-862 | 5.3 | Medium | 2024-11-01 |
| CVE-2024-9501 | WordPress plugin Wp Social Login and Register Social Counter 安全漏洞 — Wp Social Login and Register Social Counter CWE-288 | 9.8 | Critical | 2024-10-26 |
| CVE-2024-10091 | WordPress plugin ElementsKit Elementor addons 跨站脚本漏洞 — ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor CWE-79 | 6.4 | Medium | 2024-10-26 |
| CVE-2024-8546 | WordPress plugin ElementsKit Elementor addons 跨站脚本漏洞 — ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor CWE-79 | 6.4 | Medium | 2024-09-25 |
| CVE-2023-0714 | 编号已被CVE保留 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor CWE-434 | 8.1 | High | 2024-08-17 |
| CVE-2024-6698 | WordPress plugin FundEngine 安全漏洞 — FundEngine – Donation and Crowdfunding Platform CWE-862 | 8.8 | High | 2024-08-01 |
| CVE-2024-6455 | WordPress plugin ElementsKit Elementor 安全漏洞 — ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor CWE-200 | 5.3 | Medium | 2024-07-18 |
本页汇总了 roxnor 厂商截至目前公开的全部 92 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。