| CVE-2025-65427 |
Dbit N300 T1 Pro路由器登录接口缺乏速率限制导致暴力破解 |
中危 |
6.5 |
2025-12-16 |
| CVE-2025-65319 |
Blue Mail附件保存缺失Mark-of-the-Web安全绕过漏洞 |
严重 |
9.1 |
2025-12-16 |
| CVE-2025-65318 |
Canary Mail附件保存缺少Mark-of-the-Web导致安全机制绕过 |
严重 |
9.1 |
2025-12-16 |
| CVE-2025-65076 |
WaveView路径遍历漏洞允许读取/删除服务器文件 |
中危 |
6.1 |
2025-12-16 |
| CVE-2025-65075 |
WaveView alog脚本路径遍历漏洞 |
中危 |
6.5 |
2025-12-16 |
| CVE-2025-65074 |
WaveView Client路径遍历导致远程代码执行漏洞 |
高危 |
7.2 |
2025-12-16 |
| CVE-2025-64639 |
WordPress WP Compress MainWP插件缺失授权漏洞 |
中危 |
5.3 |
2025-12-16 |
| CVE-2025-64638 |
OnPay.io WooCommerce插件缺失授权漏洞 |
中危 |
5.3 |
2025-12-16 |
| CVE-2025-64635 |
WordPress Feeds for YouTube插件缺失授权漏洞 |
中危 |
5.3 |
2025-12-16 |
| CVE-2025-64634 |
Avada主题 <=7.13.2 缺少授权访问控制漏洞 |
中危 |
5.3 |
2025-12-16 |
| CVE-2025-64633 |
Norebro Extra WordPress插件存储型XSS漏洞 |
中危 |
5.3 |
2025-12-16 |
| CVE-2025-64632 |
WordPress Google XML Sitemaps 插件授权缺失漏洞 |
中危 |
5.3 |
2025-12-16 |
| CVE-2025-64631 |
WCFM Marketplace 插件缺少授权访问控制漏洞 |
中危 |
4.9 |
2025-12-16 |
| CVE-2025-64630 |
WordPress Business Directory Plugin 授权缺失漏洞 |
中危 |
4.9 |
2025-12-16 |
| CVE-2025-64520 |
GLPI知识库API未授权访问漏洞 |
中危 |
6.5 |
2025-12-16 |
| CVE-2025-64253 |
WordPress Health Check插件路径遍历漏洞 |
中危 |
4.9 |
2025-12-16 |
| CVE-2025-64251 |
WordPress Ultimate Learning Pro插件授权缺失漏洞 |
中危 |
4.9 |
2025-12-16 |
| CVE-2025-64250 |
WordPress Directorist插件开放重定向漏洞 (CVE-2025-64250) |
中危 |
4.7 |
2025-12-16 |
| CVE-2025-64249 |
Protect WP Admin插件访问控制缺陷漏洞 |
中危 |
5.3 |
2025-12-16 |
| CVE-2025-64248 |
WordPress Request a Quote插件缺失授权漏洞 |
中危 |
4.3 |
2025-12-16 |
| CVE-2025-64247 |
WordPress Read More & Accordion插件存在访问控制缺陷 |
中危 |
4.3 |
2025-12-16 |
| CVE-2025-64246 |
WordPress AudioEye插件访问控制失效漏洞 |
中危 |
4.3 |
2025-12-16 |
| CVE-2025-64245 |
WordPress import-external-attachments插件缺失授权漏洞 |
中危 |
4.3 |
2025-12-16 |
| CVE-2025-64244 |
WordPress Restrict Elementor Widgets插件访问控制漏洞 |
中危 |
4.3 |
2025-12-16 |
| CVE-2025-64243 |
WordPress Directory Pro插件缺失授权漏洞 |
中危 |
4.3 |
2025-12-16 |
| CVE-2025-64242 |
Easy Property Listings插件缺失授权漏洞 |
中危 |
4.3 |
2025-12-16 |
| CVE-2025-64241 |
- WP Coupons and Deals 插件访问控制漏洞 |
中危 |
4.3 |
2025-12-16 |
| CVE-2025-64240 |
WordPress Freshchat插件CSRF跨站请求伪造漏洞 |
中危 |
4.3 |
2025-12-16 |
| CVE-2025-64239 |
WordPress rtl-tester插件跨站请求伪造漏洞 |
中危 |
4.3 |
2025-12-16 |
| CVE-2025-64238 |
WordPress WPS Bidouille插件越权访问漏洞 |
中危 |
4.3 |
2025-12-16 |