Softaculous 厂商相关 42 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
Softaculous 是流行的 Web 应用安装脚本平台，广泛用于自动化部署 WordPress 等软件。其历史漏洞主要涉及远程代码执行、跨站脚本及越权访问，常因输入验证缺失或配置不当引发。截至最新统计，已收录 35 条 CVE，凸显其在集成复杂第三方组件时的安全风险。用户需定期更新版本并严格限制访问权限，以缓解潜在威胁，确保托管环境稳定。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-43643 | Virtualizor 计费模块授权绕过 — Virtualizor CWE-862 | 7.5 | High | 2026-09-22 |
| CVE-2026-43642 | Softaculous Virtualizor PHP对象注入漏洞 — Virtualizor CWE-502 | 8.1 | High | 2026-09-22 |
| CVE-2026-43641 | Softaculous Virtualizor 账单模块命令注入漏洞 — Virtualizor CWE-78 | 9.8 | Critical | 2026-09-22 |
| CVE-2026-5114 | WordPress SpeedyCache 路径遍历漏洞 — SpeedyCache – Cache, Optimization, Performance CWE-22 | 4.9 | Medium | 2026-07-28 |
| CVE-2026-59519 | WordPress FormLayer 日志信息泄露漏洞 — FormLayer CWE-201 | 5.3 | Medium | 2026-07-05 |
| CVE-2026-2470 | Softaculous Page Builder: Pagelayer – Drag and Drop website builder 授权问题漏洞 — Page Builder: Pagelayer – Drag and Drop website builder CWE-863 | 4.3 | Medium | 2026-06-13 |
| CVE-2026-3297 | Softaculous Page Builder: Pagelayer – Drag and Drop website builder 跨站脚本漏洞 — Page Builder: Pagelayer – Drag and Drop website builder CWE-79 | 6.4 | Medium | 2026-06-13 |
| CVE-2026-2509 | WordPress plugin Page Builder: Pagelayer 跨站脚本漏洞 — Page Builder: Pagelayer – Drag and Drop website builder CWE-79 | 6.4 | Medium | 2026-04-08 |
| CVE-2026-39469 | WordPress plugin PageLayer 安全漏洞 — PageLayer CWE-497 | 4.3 | Medium | 2026-04-08 |
| CVE-2026-2442 | WordPress plugin Pagelayer 注入漏洞 — Page Builder: Pagelayer – Drag and Drop website builder CWE-93 | 5.3 | Medium | 2026-03-28 |
| CVE-2025-13085 | WordPress plugin SiteSEO 授权问题漏洞 — SiteSEO – SEO Simplified CWE-285 | 4.3 | Medium | 2025-11-19 |
| CVE-2025-12814 | WordPress plugin SiteSEO 授权问题漏洞 — SiteSEO – SEO Simplified CWE-285 | 5.3 | Medium | 2025-11-19 |
| CVE-2025-12366 | WordPress plugin Page Builder: Pagelayer – Drag and Drop website builder 安全漏洞 — Page Builder: Pagelayer – Drag and Drop website builder CWE-639 | 4.3 | Medium | 2025-11-13 |
| CVE-2025-12367 | WordPress plugin SiteSEO 授权问题漏洞 — SiteSEO – SEO Simplified CWE-285 | 4.3 | Medium | 2025-11-01 |
| CVE-2025-10307 | WordPress plugin Backuply 路径遍历漏洞 — Backuply – Backup, Restore, Migrate and Clone CWE-22 | 6.5 | Medium | 2025-09-26 |
| CVE-2025-9277 | WordPress plugin SiteSEO 跨站脚本漏洞 — SiteSEO – SEO Simplified CWE-79 | 6.4 | Medium | 2025-08-26 |
| CVE-2025-4223 | WordPress plugin Page Builder: Pagelayer 跨站脚本漏洞 — Page Builder: Pagelayer – Drag and Drop website builder CWE-79 | 4.7 | Medium | 2025-05-24 |
| CVE-2024-13427 | WordPress plugin Page Builder: Pagelayer 跨站脚本漏洞 — Page Builder: Pagelayer – Drag and Drop website builder CWE-79 | 6.4 | Medium | 2025-05-24 |
| CVE-2025-2104 | WordPress plugin Page Builder: Pagelayer – Drag and Drop website builder 安全漏洞 — Page Builder: Pagelayer – Drag and Drop website builder CWE-862 | 4.3 | Medium | 2025-03-13 |
| CVE-2024-13430 | WordPress plugin Page Builder: Pagelayer – Drag and Drop website builder 访问控制错误漏洞 — Page Builder: Pagelayer – Drag and Drop website builder CWE-284 | 4.3 | Medium | 2025-03-12 |
| CVE-2025-1926 | WordPress plugin Page Builder: Pagelayer 跨站请求伪造漏洞 — Page Builder: Pagelayer – Drag and Drop website builder CWE-352 | 4.3 | Medium | 2025-03-10 |
| CVE-2025-24573 | WordPress plugin PageLayer 跨站脚本漏洞 — PageLayer CWE-79 | 6.5 | Medium | 2025-01-24 |
| CVE-2024-11010 | WordPress plugin FileOrganizer 路径遍历漏洞 — FileOrganizer – WordPress File Manager CWE-22 | 7.2 | High | 2024-12-07 |
| CVE-2024-10097 | WordPress plugin Loginizer Security and Loginizer 授权问题漏洞 — Loginizer Security CWE-287 | 8.1 | High | 2024-11-05 |
| CVE-2024-7985 | WordPress plugin FileOrganizer 代码问题漏洞 — FileOrganizer – WordPress File Manager CWE-434 | 7.5 | High | 2024-10-29 |
| CVE-2024-8669 | WordPress plugin Backuply SQL注入漏洞 — Backuply – Backup, Restore, Migrate and Clone CWE-89 | 9.1 | Critical | 2024-09-14 |
| CVE-2024-43299 | WordPress plugin SpeedyCache 跨站请求伪造漏洞 — SpeedyCache CWE-352 | 5.4 | Medium | 2024-08-26 |
| CVE-2024-24622 | Webuzo 安全漏洞 — Webuzo CWE-78 | 8.8 | High | 2024-07-25 |
| CVE-2024-24623 | Webuzo 安全漏洞 — Webuzo CWE-78 | 8.8 | High | 2024-07-25 |
| CVE-2024-24621 | Webuzo 安全漏洞 — Webuzo CWE-697 | 9.8 | Critical | 2024-07-25 |
本页汇总了 Softaculous 厂商截至目前公开的全部 42 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。