| CVE-2025-14278 |
| HT Slider for Elementor插件存储型XSS漏洞 |
中危 |
6.4 |
2025-12-13 |
| CVE-2025-14056 |
WordPress Custom Post Type UI插件存储型XSS漏洞 |
中危 |
4.4 |
2025-12-13 |
| CVE-2025-14050 |
WordPress Design Import/Export插件XML导入SQL注入漏洞 |
中危 |
4.9 |
2025-12-13 |
| CVE-2025-13970 |
OpenPLC_V3 CSRF跨站请求伪造漏洞 |
高危 |
8.0 |
2025-12-13 |
| CVE-2025-13705 |
WordPress Custom Frames插件存储型XSS漏洞 |
中危 |
6.4 |
2025-12-13 |
| CVE-2025-13403 |
WordPress Employee Spotlight插件未授权设置修改漏洞 |
中危 |
4.3 |
2025-12-13 |
| CVE-2025-13094 |
WordPress WP3D插件任意文件上传漏洞 |
高危 |
8.8 |
2025-12-13 |
| CVE-2025-13093 |
WordPress Devs CRM插件未授权API访问漏洞 |
中危 |
5.3 |
2025-12-13 |
| CVE-2025-13092 |
WordPress Devs CRM插件未授权访问漏洞 |
中危 |
5.3 |
2025-12-13 |
| CVE-2025-13089 |
WordPress WP Directory Kit插件SQL注入漏洞 |
高危 |
7.5 |
2025-12-13 |
| CVE-2025-13077 |
WordPress payamito SMS WooCommerce插件SQL注入漏洞 |
高危 |
7.5 |
2025-12-13 |
| CVE-2025-12512 |
WordPress GenerateBlocks插件信息泄露漏洞 |
中危 |
4.3 |
2025-12-13 |
| CVE-2025-12362 |
myCred WordPress插件缺少授权漏洞 |
中危 |
5.3 |
2025-12-13 |
| CVE-2025-12109 |
WordPress Header Footer Script Adder插件存储型XSS漏洞 |
中危 |
6.4 |
2025-12-13 |
| CVE-2025-12077 |
WordPress WP to LinkedIn Auto Publish插件反射型XSS漏洞 |
中危 |
6.1 |
2025-12-13 |
| CVE-2025-12076 |
WordPress Social Media Auto Publish插件反射型XSS漏洞 |
中危 |
6.1 |
2025-12-13 |
| CVE-2025-11970 |
WordPress Emplibot插件SSRF漏洞 |
中危 |
4.4 |
2025-12-13 |
| CVE-2025-11707 |
WordPress Login Lockdown插件IP封锁绕过漏洞 |
中危 |
5.3 |
2025-12-13 |
| CVE-2025-11693 |
WordPress Export插件敏感信息泄露漏洞 |
严重 |
9.8 |
2025-12-13 |
| CVE-2025-11376 |
WordPress Colibri Page Builder存储型XSS漏洞 |
中危 |
6.4 |
2025-12-13 |
| CVE-2025-11164 |
WordPress Mavix Education主题权限绕过漏洞 |
中危 |
4.3 |
2025-12-13 |
| CVE-2025-10738 |
WordPress URL Shortener Plugin SQL注入漏洞 |
严重 |
9.8 |
2025-12-13 |
| CVE-2025-10289 |
WordPress Filter & Grids插件SQL注入漏洞 |
中危 |
5.9 |
2025-12-13 |
| CVE-2025-0969 |
WordPress Brizy插件敏感信息泄露漏洞 |
中危 |
6.5 |
2025-12-13 |
| CVE-2025-8083 |
Vuetify Preset配置原型污染漏洞 |
高危 |
8.6 |
2025-12-12 |
| CVE-2025-67819 |
Weaviate OSS 任意文件读取漏洞 |
中危 |
4.9 |
2025-12-12 |
| CVE-2025-67818 |
Weaviate OSS路径遍历漏洞导致任意文件写入 |
高危 |
7.2 |
2025-12-12 |
| CVE-2025-67779 |
React Server Components 拒绝服务漏洞 |
高危 |
7.5 |
2025-12-12 |
| CVE-2025-67750 |
Lightning Flow Scanner 远程代码执行漏洞 (CVE-2025-67750) |
高危 |
8.4 |
2025-12-12 |
| CVE-2025-67737 |
AzuraCast内部API端点暴露漏洞 |
低危 |
3.1 |
2025-12-12 |