目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

xtemos 厂商漏洞列表 / CVE 中文分析 21

xtemos 厂商相关 21 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Xtemos 是一家提供 Web 开发解决方案的厂商，其产品主要面向企业级网站和应用开发。历史上，其产品曾存在多种安全漏洞，包括远程代码执行、跨站脚本和权限绕过等。截至最新统计，该厂商的产品已报告 19 条 CVE 记录，其中部分漏洞曾被广泛利用。安全研究人员建议用户及时更新至最新版本，并实施最小权限原则以降低潜在风险。

上位製品 xtemos: WoodMart WoodMart - Multipurpose WooCommerce Theme Woodmart Core Basel Hitek
CVE IDタイトルCVSS深刻度公開日
CVE-2026-56072 WordPress WoodMart theme <= 8.5.3 - Cross Site Scripting (XSS) vulnerability — WoodMartCWE-79 7.1 High2026-06-26
CVE-2026-39582 WordPress Hitek theme < 1.8.3 - Local File Inclusion vulnerability — HitekCWE-98 8.1 High2026-06-17
CVE-2026-23971 WordPress WoodMart theme <= 8.3.8 - PHP Object Injection vulnerability — WoodMartCWE-502 8.1 High2026-03-25
CVE-2026-32405 WordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerability — WoodMartCWE-497 5.3 Medium2026-03-13
CVE-2025-47600 WordPress WoodMart theme <= 8.3.7 - Arbitrary Shortcode Execution vulnerability — WoodMartCWE-80 5.3 Medium2026-01-22
CVE-2025-67568 WordPress Basel theme <= 5.9.1 - Broken Access Control vulnerability — BaselCWE-862 5.3 Medium2025-12-09
CVE-2025-49935 WordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability — WoodMartCWE-98 7.5 High2025-10-22
CVE-2025-49936 WordPress WoodMart theme < 8.3.2 - Cross Site Scripting (XSS) vulnerability — WoodMartCWE-79 6.5 Medium2025-10-22
CVE-2025-8097 WoodMart - Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation — WoodmartCWE-20 5.3 Medium2025-07-26
CVE-2025-6745 WoodMart <= 8.2.5 - Unauthenticated Post Disclosure — WoodmartCWE-200 5.3 Medium2025-07-11
CVE-2025-6744 Woodmart <= 8.2.3 - Unauthenticated Arbitrary Shortcode Execution — WoodmartCWE-94 7.3 High2025-07-08
CVE-2025-6746 WoodMart <= 8.2.3 - Authenticated (Contributor+) Local File Inclusion — WoodmartCWE-98 8.8 High2025-07-08
CVE-2025-6743 WoodMart <= 8.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting — WoodmartCWE-79 6.4 Medium2025-07-08
CVE-2023-32240 WordPress Woodmart theme <= 7.2.1 - Broken Access Control vulnerability — WoodMartCWE-862 5.4 Medium2025-01-02
CVE-2024-12333 WoodMart <= 8.0.3 - Unauthenticated Arbitrary Shortcode Execution — WoodmartCWE-94 6.5 Medium2024-12-12
CVE-2023-32244 WordPress Woodmart Core plugin <= 1.0.36 - Privilege Escalation — Woodmart CoreCWE-269 9.8 Critical2024-05-17
CVE-2023-25790 WordPress WoodMart theme <= 7.0.4 - Unauth Arbitrary Shortcodes Injection — WoodMartCWE-287 5.3 Medium2024-04-24
CVE-2023-32242 WordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to PHP Object Injection — WoodMart - Multipurpose WooCommerce ThemeCWE-502 9.8 Critical2023-12-21
CVE-2023-32500 WordPress WoodMart Theme <= 7.1.1 is vulnerable to Cross Site Request Forgery (CSRF) — WoodMart - Multipurpose WooCommerce ThemeCWE-352 5.4 Medium2023-11-09
CVE-2023-41872 WordPress WoodMart Theme <= 7.2.4 is vulnerable to Cross Site Scripting (XSS) — WoodMartCWE-79 7.1 High2023-09-25
CVE-2023-32239 WordPress WoodMart Theme <= 7.2.1 is vulnerable to Cross Site Scripting (XSS) — WoodMartCWE-79 5.4 Medium2023-06-22

本页汇总了 xtemos 厂商截至目前公开的全部 21 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。