VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
WordPress WPify Woo Czech <3.5.7 - Cross-Site Scripting wpify-woo-czech	跨站脚本攻击	高危	7.2	—	PoC	2023/10/20
Product Input Fields for WooCommerce < 1.2.7 - Unauthenticated File Download WooCommerce	文件包含	高危	8.6	—	PoC	2023/10/20
WordPress Upward Themes <1.5 - Open Redirect upward	不安全的重定向	中危	—	—	PoC	2023/10/20
WordPress WPtouch 3.7.5 - Open Redirect wptouch	未授权访问	中危	—	—	PoC	2023/10/20
Wordpress sym404 directory sym404	信息泄露	高危	—	—	PoC	2023/10/20
Superstorefinder WP-plugin - Security Misconfigurations superstorefinder-wp	安全配置错误	中危	—	—	PoC	2023/10/20
WordPress Javo Spot Premium Theme - Unauthenticated Directory Traversal javo_spot_premium	路径穿越	高危	—	—	PoC	2023/10/20
RCE Social Warfare <= 3.5.2 - Remote Code Execution social_warfare	远程代码执行	严重	—	—	PoC	2023/10/20
Smart Manager for WooCommerce & WPeC <= 3.9.6 - SQL Injection smart-manager-for-wp-e-commerce	SQL注入	严重	—	—	PoC	2023/10/20
RCE WordPress Simple Fields 0.2 - 0.3.5 LFI/RFI/RCE simple_fields	文件包含	高危	—	—	PoC	2023/10/20
WordPress All-in-One Security <=4.4.1 - Open Redirect all-in-one-wp-security-and-firewall	不安全的重定向	中危	6.1	—	PoC	2023/10/20
Reality Estate Multipurpose WP-Theme < 2.5.3 - Cross-Site Scripting reality	跨站脚本攻击	中危	6.1	—	PoC	2023/10/20
WordPress Real Estate 7 Theme <= 3.3.4 - Cross-Site Scripting realestate-7	跨站脚本攻击	中危	6.1	—	PoC	2023/10/20
WordPress Plugin Qards qards	目录列举	低危	—	—	PoC	2023/10/20
WordPress ProStore <1.1.3 - Open Redirect prostore	不安全的重定向	低危	—	—	PoC	2023/10/20
WordPress Portrait-Archiv.com Photostore 5.0.4 - Reflected Cross Site Scripting portrait-archiv-shop	跨站脚本攻击	中危	—	—	PoC	2023/10/20
WordPress Popup Plugin Directory Listing wordpress-popup	目录列举	低危	—	—	PoC	2023/10/20
WordPress Oxygen-Theme - Local File Inclusion oxygen-theme	文件包含	高危	7.5	—	PoC	2023/10/20
Wordpress Plugin MStore API mstore_api	目录列举	低危	—	—	PoC	2023/10/20
Mega Wordpress Theme - Cross site scripting megawp	跨站脚本攻击	中危	—	—	PoC	2023/10/20