目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

wpexpertsio 厂商漏洞列表 / CVE 中文分析 6

wpexpertsio 厂商相关 6 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

wpexpertsio 是专注于 WordPress 安全服务的厂商，提供安全审计、漏洞修复和防护方案。历史上其产品常见漏洞类型包括远程代码执行、跨站脚本和权限绕过，这些漏洞多源于输入验证不足和权限控制缺陷。截至最新统计，该厂商相关项目已记录 6 条 CVE 漏洞，主要集中在插件和主题层面。其安全特性包括定期安全更新和漏洞奖励计划，但部分版本仍存在配置不当导致的安全风险。

上位製品 wpexpertsio: Email Templates Customizer and Designer for WordPress and WooCommerce Rocket Maintenance Mode & Coming Soon Page New User Approve WC Shop Sync – Integrate Square and WooCommerce for Seamless Shop Management APIExperts Square for WooCommerce WP Multistore Locator — WP Store Locator Plugin: Effortless Integration With Snazzy Maps
CVE IDタイトルCVSS深刻度公開日
CVE-2024-12475 WP Multi Store Locator <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting — WP Multistore Locator — WP Store Locator Plugin: Effortless Integration With Snazzy MapsCWE-79 6.4 Medium2025-01-04
CVE-2022-47182 WordPress APIExperts Square for WooCommerce plugin <= 4.4.1 - Broken Access Control — APIExperts Square for WooCommerceCWE-862 5.3 Medium2024-12-13
CVE-2024-27959 WordPress APIExperts Square for WooCommerce plugin <= 4.2.9 - Cross Site Scripting (XSS) vulnerability — WC Shop Sync – Integrate Square and WooCommerce for Seamless Shop ManagementCWE-79 7.1 High2024-03-17
CVE-2023-50902 WordPress New User Approve Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF) — New User ApproveCWE-352 4.3 Medium2023-12-29
CVE-2023-49842 WordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS) — Rocket Maintenance Mode & Coming Soon PageCWE-79 5.9 Medium2023-12-14
CVE-2022-47181 WordPress Email Templates Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF) — Email Templates Customizer and Designer for WordPress and WooCommerceCWE-352 4.3 Medium2023-11-07

本页汇总了 wpexpertsio 厂商截至目前公开的全部 6 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。