ZONE.CI 全球网

N/ACVE编号
CVE-2024-43201利用情况
暂无补丁情况 N/A披露时间 2024-09-24漏洞描述在版本 9.8.12 之前（发布于 202

N/ACVE编号
CVE-2024-46639利用情况
暂无补丁情况 N/A披露时间 2024-09-24漏洞描述HelpDeskZ v2.0.2存在一个跨

WPZOOM 短代码 <= 1.0.5 - 通过框短代码 (CVE-2024-9027) 验证 (Contributor+) 存储跨站点脚本CVE编号
CVE

N/ACVE编号
CVE-2024-47222利用情况
暂无补丁情况 N/A披露时间 2024-09-24漏洞描述New Cloud MyOffice SD

WP GPX Maps <= 1.7.08 - 通过 sgpx 短代码验证 (Contributor+) 存储跨站点脚本 (CVE-2024-9028)CVE编

Graphicsly – WordPress 网站构建器的终极图形插件（Gutenberg、Elementor、Beaver Builder、WPBakery）

OneElements – 最佳 Elementor 插件 <= 1.3.7 - 通过 SVG 文件上传进行经过身份验证的 (Author+) 存储跨站点脚本

GutenGeek 适用于 WordPress <= 1.1.3 的免费 G​​utenberg Blocks - 通过 SVG 文件上传进行身份验证 (Aut

WordPress 简单 HTML 站点地图 <= 3.1 - 经过身份验证 (Admin+) SQL 注入 (CVE-2024-7385)CVE编号
CVE

Themesflat Addons For Elementor <= 2.2.1 - 经过身份验证 (Contributor+) 信息泄露 (CVE-2024-

Themesflat Addons For Elementor <= 2.2.1 - 经过身份验证 (Contributor+) 存储的跨站点脚本 (CVE-2

The Events Calendar <= 6.6.4 - Unauthenticated SQL Injection (CVE-2024-8275)CVE编

Prisna GWT - Google 网站翻译 <= 1.4.11 - 已通过身份验证 (Admin+) PHP 对象注入 (CVE-2024-8514)CV

ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in

SmartSearchWP < 2.4.6 - Unauthenticated OpenAI Key Disclosure (CVE-2024-6845)CVE

WP ULike < 4.7.4 - Admin+ Stored XSS (CVE-2024-7878)CVE编号
CVE-2024-7878利用情况
暂无

adstxt Plugin <= 1.0.0 - Settings Update via CSRF (CVE-2024-7892)CVE编号
CVE-2024

myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give

Ninja Forms Contact Form <= 3.8.15 - Reflected Self-Based Cross-Site Scripting v

Revolut Gateway for WooCommerce <= 4.17.3 - Missing Authorization to Unauthentic

WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listing

Apache Answer: Avatar URL leaked user email addresses (CVE-2024-40761)CVE编号
CVE

Apache Hadoop: Temporary File Local Information Disclosure (CVE-2024-23454)CVE编号

WordPress Elementor Addons by Livemesh plugin <= 8.5 - Cross Site Scripting (XSS

HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+)