目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

ThemeHunk 厂商漏洞列表 / CVE 中文分析 37

ThemeHunk 厂商相关 37 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

ThemeHunk 主要提供 WordPress 主题与插件资源，其核心业务涵盖数字内容分发。截至最新统计，该厂商已关联 31 条 CVE，历史漏洞多集中于远程代码执行、跨站脚本及越权访问，常因代码审计不足或依赖组件缺陷引发。值得关注的是，部分高危漏洞允许攻击者直接获取服务器权限，凸显了第三方插件生态中供应链安全的严峻挑战，建议用户及时更新并强化访问控制。

Top products by ThemeHunk: Lead Form Builder & Contact Form Contact Form & Lead Form Elementor Builder Vayu Blocks – Website Builder for the Block Editor Advance WordPress Search Plugin Advance Product Search Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce Big Store Gutenberg Blocks Easy Mega Menu for WordPress – ThemeHunk Zita Advance Product Search- Voice & Ajax Search for WooCommerce Open Shop TH Login Registration Oneline Lite Wishlist for WooCommerce WP Popup Builder WP Popup Builder – Popup Forms and Marketing Lead Generation ThemeHunk Hunk Companion Zita Site Builder Variation Swatches for WooCommerce TH Variation Swatches Th Shop Mania Top Store
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-66607 WordPress Advance Product Search插件1.4.8及以下版本跨站脚本漏洞 — Advance Product Search CWE-79 7.1 High 2026-08-20
CVE-2026-12753 themehunk Advance Product Search- Voice & Ajax Search for WooCommerce SQL注入漏洞 — Advance Product Search- Voice & Ajax Search for WooCommerce CWE-89 7.5 High 2026-07-16
CVE-2026-57405 themehunk Open Shop 授权问题漏洞 — Open Shop CWE-862 7.1 High 2026-07-13
CVE-2026-14250 WordPress TH Login Registration 权限许可和访问控制问题漏洞 — TH Login Registration CWE-269 6.3 Medium 2026-07-08
CVE-2026-56070 ThemeHunk Advance Product Search SQL注入漏洞 — Advance Product Search CWE-89 9.3 Critical 2026-06-26
CVE-2023-25969 WordPress plugin Contact Form and Lead Form Elementor Builder 安全漏洞 — Contact Form & Lead Form Elementor Builder CWE-862 5.4 Medium 2026-06-11
CVE-2026-32532 WordPress plugin Contact Form & Lead Form Elementor Builder 安全漏洞 — Contact Form & Lead Form Elementor Builder CWE-79 7.1 High 2026-03-25
CVE-2026-25438 WordPress plugin Gutenberg Blocks 跨站脚本漏洞 — Gutenberg Blocks CWE-79 7.1 High 2026-03-19
CVE-2026-1454 WordPress plugin Responsive Contact Form Builder & Lead Generation Plugin 跨站脚本漏洞 — Lead Form Builder & Contact Form CWE-79 7.2 High 2026-03-11
CVE-2025-68046 WordPress plugin Contact Form & Lead Form Elementor Builder 安全漏洞 — Contact Form & Lead Form Elementor Builder CWE-497 6.5 Medium 2026-01-22
CVE-2025-69344 WordPress plugin Oneline Lite 安全漏洞 — Oneline Lite CWE-862 4.3 Medium 2026-01-07
CVE-2025-12040 WordPress plugin Wishlist for WooCommerce 安全漏洞 — Wishlist for WooCommerce CWE-639 6.5 Medium 2025-11-25
CVE-2025-62902 WordPress plugin WP Popup Builder 安全漏洞 — WP Popup Builder CWE-497 5.3 Medium 2025-10-27
CVE-2025-9378 WordPress plugin Vayu Blocks 跨站脚本漏洞 — Vayu Blocks – Website Builder for the Block Editor CWE-79 6.4 Medium 2025-09-03
CVE-2025-52816 WordPress plugin Zita 安全漏洞 — Zita CWE-98 8.1 High 2025-06-27
CVE-2025-30990 WordPress plugin ThemeHunk 安全漏洞 — ThemeHunk CWE-862 4.3 Medium 2025-06-06
CVE-2025-4420 WordPress plugin Vayu Blocks 跨站脚本漏洞 — Vayu Blocks – Website Builder for the Block Editor CWE-79 6.4 Medium 2025-06-03
CVE-2025-2568 WordPress plugin Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce 安全漏洞 — Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce CWE-862 5.3 Medium 2025-04-08
CVE-2025-22644 WordPress plugin Vayu Blocks 跨站脚本漏洞 — Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce CWE-79 6.5 Medium 2025-03-27
CVE-2025-30881 WordPress plugin Big Store 安全漏洞 — Big Store CWE-862 4.3 Medium 2025-03-27
CVE-2024-13511 WordPress plugin Variation Swatches for WooCommerce 跨站请求伪造漏洞 — Variation Swatches for WooCommerce CWE-352 4.3 Medium 2025-01-23
CVE-2024-54369 WordPress plugin Zita Site Builder 安全漏洞 — Zita Site Builder CWE-862 9.1 Critical 2024-12-16
CVE-2024-10124 WordPress plugin Vayu Blocks 访问控制错误漏洞 — Vayu Blocks – Website Builder for the Block Editor CWE-284 9.8 Critical 2024-12-12
CVE-2023-28688 WordPress plugin TH Variation Swatches 跨站请求伪造漏洞 — TH Variation Swatches CWE-352 5.4 Medium 2024-12-09
CVE-2024-10674 WordPress plugin Th Shop Mania 安全漏洞 — Th Shop Mania CWE-862 8.8 High 2024-11-09
CVE-2024-10673 WordPress plugin Top Store 安全漏洞 — Top Store CWE-862 8.8 High 2024-11-09
CVE-2024-9061 WordPress plugin The WP Popup Builder 代码注入漏洞 — WP Popup Builder – Popup Forms and Marketing Lead Generation CWE-94 7.3 High 2024-10-16
CVE-2024-9707 WordPress plugin Hunk Companion 安全漏洞 — Hunk Companion CWE-862 9.8 Critical 2024-10-11
CVE-2024-8433 WordPress plugin ThemeHunk 跨站脚本漏洞 — Easy Mega Menu for WordPress – ThemeHunk CWE-79 6.4 Medium 2024-10-08
CVE-2024-8434 WordPress plugin ThemeHunk 安全漏洞 — Easy Mega Menu for WordPress – ThemeHunk CWE-862 4.3 Medium 2024-09-25

本页汇总了 ThemeHunk 厂商截至目前公开的全部 37 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。