wpWax 厂商相关 42 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
wpWax 是一款专注于企业级内容管理与电子商务的开源解决方案,旨在提供灵活的网站构建及在线销售功能。其历史漏洞记录显示,常见安全风险包括远程代码执行、跨站脚本攻击及权限绕过,部分源于配置不当或插件兼容性缺陷。鉴于已收录 36 条 CVE,建议管理员定期更新核心组件并严格审查第三方扩展,以强化系统防御能力,确保数据交互安全。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-29925 | WordPress Plugin Post Grid, Slider & Carousel Ultimate 跨站脚本漏洞 — Post Grid, Slider & Carousel Ultimate CWE-79 | 6.5 | Medium | 2024-03-27 |
| CVE-2023-50886 | WordPress Plugin Legal Pages 安全漏洞 — Legal Pages CWE-352 | 4.3 | Medium | 2024-03-15 |
| CVE-2024-1950 | WordPress Plugin Product Carousel Slider & Grid Ultimate for WooCommerce 安全漏洞 — Product Carousel Slider & Grid Ultimate for WooCommerce CWE-502 | 7.5 | High | 2024-03-13 |
| CVE-2024-1951 | WordPress Plugin Logo Showcase Ultimate 安全漏洞 — Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid CWE-502 | 7.5 | High | 2024-03-13 |
| CVE-2024-2006 | WordPress Plugin Post Grid, Slider & Carousel Ultimate 安全漏洞 — Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget CWE-502 | 8.8 | High | 2024-03-13 |
| CVE-2024-1322 | WordPress Plugin Directorist 安全漏洞 — Directorist: AI-Powered Business Directory, Listings & Classified Ads CWE-862 | 5.3 | Medium | 2024-02-20 |
| CVE-2023-47824 | WordPress Plugin Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator 跨站请求伪造漏洞 — Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator CWE-352 | 5.4 | Medium | 2023-11-22 |
| CVE-2023-41798 | WordPress Plugin Directorist 安全漏洞 — Directorist – WordPress Business Directory Plugin with Classified Ads Listings CWE-1236 | 5.1 | Medium | 2023-11-07 |
| CVE-2023-1889 | WordPress Plugin Directorist 安全漏洞 — Directorist: AI-Powered Business Directory, Listings & Classified Ads CWE-639 | 6.5 | Medium | 2023-06-09 |
| CVE-2023-1888 | WordPress Plugin Directorist 输入验证错误漏洞 — Directorist: AI-Powered Business Directory, Listings & Classified Ads CWE-20 | 8.8 | High | 2023-06-09 |
| CVE-2022-34650 | WordPress plugin wpWax Team 跨站脚本漏洞 — Team (WordPress plugin) CWE-79 | 4.1 | Medium | 2022-07-22 |
| CVE-2022-34853 | WordPress plugin wpWax Team 跨站脚本漏洞 — Team (WordPress plugin) CWE-79 | 4.1 | Medium | 2022-07-22 |
本页汇总了 wpWax 厂商截至目前公开的全部 42 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。