目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1310 元

100%
请我们喝杯咖啡

stellarwp 厂商漏洞列表 / CVE 中文分析 115

stellarwp 厂商相关 115 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Stellarwp 是一家专注于 WordPress 生态系统的企业，其核心业务涵盖高端主题开发及 Elementor 等知名插件的维护。鉴于其广泛的用户基数，该厂商历史上频繁遭遇远程代码执行、跨站脚本及越权访问等高危漏洞。其安全动态备受业界关注，特别是因收录多达 115 条 CVE 记录，凸显了复杂插件架构下的供应链风险。这些漏洞多源于代码审计疏漏，提醒开发者需强化输入验证与权限控制机制。

Top products by stellarwp: GiveWP – Donation Plugin and Fundraising Platform Kadence Blocks — Page Builder Toolkit for Gutenberg Editor The Events Calendar GiveWP Membership Plugin – Restrict Content LearnDash LMS Event Tickets and Registration Gutenberg Blocks by Kadence Blocks WPComplete Kadence WooCommerce Email Designer Event Tickets Bookit — Booking & Appointment Calendar Restrict Content LearnDash LMS – Reports Give – Divi Donation Modules Virtue iThemes Sync Image Widget
CVE ID标题CVSS风险等级Published
CVE-2025-11227 WordPress plugin GiveWP 授权问题漏洞 — GiveWP – Donation Plugin and Fundraising PlatformCWE-285 6.5 Medium2025-10-04
CVE-2025-58974 WordPress plugin WPComplete 跨站脚本漏洞 — WPCompleteCWE-79 6.5 Medium2025-09-22
CVE-2025-9808 WordPress plugin The Events Calendar 信息泄露漏洞 — The Events CalendarCWE-200 5.3 Medium2025-09-16
CVE-2025-9807 WordPress plugin The Events Calendar SQL注入漏洞 — The Events CalendarCWE-89 7.5 High2025-09-12
CVE-2025-7221 WordPress plugin GiveWP 授权问题漏洞 — GiveWP – Donation Plugin and Fundraising PlatformCWE-285 4.3 Medium2025-08-21
CVE-2025-54697 WordPress plugin Kadence WooCommerce Email Designer 安全漏洞 — Kadence WooCommerce Email DesignerCWE-266 7.2 High2025-08-14
CVE-2025-8620 WordPress plugin GiveWP 信息泄露漏洞 — GiveWP – Donation Plugin and Fundraising PlatformCWE-200 5.3 Medium2025-08-06
CVE-2025-7205 WordPress plugin GiveWP 跨站脚本漏洞 — GiveWP – Donation Plugin and Fundraising PlatformCWE-79 5.4 Medium2025-07-31
CVE-2025-5678 WordPress plugin Gutenberg Blocks with AI by Kadence WP 跨站脚本漏洞 — Kadence Blocks — Page Builder Toolkit for Gutenberg EditorCWE-79 6.4 Medium2025-07-09
CVE-2025-50046 WordPress plugin WPComplete 跨站脚本漏洞 — WPCompleteCWE-79 6.5 Medium2025-06-20
CVE-2025-4571 WordPress plugin GiveWP 安全漏洞 — GiveWP – Donation Plugin and Fundraising PlatformCWE-862 5.4 Medium2025-06-19
CVE-2025-5144 WordPress plugin The Events Calendar 跨站脚本漏洞 — The Events CalendarCWE-79 6.4 Medium2025-06-11
CVE-2025-48246 WordPress plugin The Events Calendar 安全漏洞 — The Events CalendarCWE-862 5.4 Medium2025-05-19
CVE-2025-39557 WordPress plugin Kadence WooCommerce Email Designer 代码问题漏洞 — Kadence WooCommerce Email DesignerCWE-434 9.1 Critical2025-04-16
CVE-2025-30794 WordPress plugin Event Tickets 跨站脚本漏洞 — Event TicketsCWE-79 7.1 High2025-04-01
CVE-2025-2331 WordPress plugin GiveWP 信息泄露漏洞 — GiveWP – Donation Plugin and Fundraising PlatformCWE-200 5.3 Medium2025-03-22
CVE-2025-2025 WordPress plugin GiveWP 安全漏洞 — GiveWP – Donation Plugin and Fundraising PlatformCWE-862 6.5 Medium2025-03-15
CVE-2025-0912 WordPress plugin GiveWP 代码问题漏洞 — GiveWP – Donation Plugin and Fundraising PlatformCWE-502 9.8 Critical2025-03-04
CVE-2025-1291 WordPress plugin Gutenberg Blocks with AI by Kadence WP – Page Builder Features 跨站脚本漏洞 — Kadence Blocks — Page Builder Toolkit for Gutenberg EditorCWE-79 6.4 Medium2025-03-01
CVE-2025-22633 WordPress plugin Give – Divi Donation Modules 安全漏洞 — Give – Divi Donation ModulesCWE-538 5.8 Medium2025-02-23
CVE-2025-1402 WordPress plugin Event Tickets and Registration 安全漏洞 — Event Tickets and RegistrationCWE-862 5.3 Medium2025-02-21
CVE-2024-13457 WordPress plugin Event Tickets and Registration 安全漏洞 — Event Tickets and RegistrationCWE-284 5.3 Medium2025-01-30
CVE-2025-24537 WordPress plugin The Events Calendar 跨站请求伪造漏洞 — The Events CalendarCWE-352 5.4 Medium2025-01-27
CVE-2024-11090 WordPress plugin Membership Plugin – Restrict Content 信息泄露漏洞 — Membership Plugin – Restrict ContentCWE-200 5.3 Medium2025-01-26
CVE-2025-24753 WordPress plugin Gutenberg Blocks by Kadence Blocks 安全漏洞 — Gutenberg Blocks by Kadence BlocksCWE-862 4.3 Medium2025-01-24
CVE-2024-12118 WordPress plugin The Events Calendar 跨站脚本漏洞 — The Events CalendarCWE-79 6.4 Medium2025-01-23
CVE-2025-22777 WordPress plugin GiveWP 安全漏洞 — GiveWPCWE-502 9.8 Critical2025-01-13
CVE-2024-12877 WordPress plugin GiveWP 代码问题漏洞 — GiveWP – Donation Plugin and Fundraising PlatformCWE-502 9.8 Critical2025-01-11
CVE-2024-12304 WordPress plugin Page Builder Features 跨站脚本漏洞 — Kadence Blocks — Page Builder Toolkit for Gutenberg EditorCWE-79 6.4 Medium2025-01-11
CVE-2024-38762 WordPress plugin Event Tickets 跨站请求伪造漏洞 — Event TicketsCWE-352 4.3 Medium2025-01-02

本页汇总了 stellarwp 厂商截至目前公开的全部 115 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。