组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 风险等级 | CVSS | EPSS | 利用情报 | 披露时间 | |
|---|---|---|---|---|---|---|
| WordPress 6.3-6.3.1 Footnotes Block - Cross-Site Scripting | 中危 | 6.4 | — | PoCEXP | ||
| WordPress Core 5.6 and 6.3.1 - Cross-Site Scripting | 中危 | 6.1 | — | PoCEXP | ||
| WordPress Core <=6.2 - Directory Traversal | 中危 | 6.1 | 70.2% | PoCEXP | ||
| WordPress <5.8.3 - SQL Injection | 高危 | 7.5 | 90.6% | PoCEXP | ||
| wordpress-upload-data | 中危 | — | — | PoCEXP | ||
| Wpdm-Cache Session | 中危 | — | — | PoCEXP | ||
| alfacgiapi | 低危 | — | — | PoCEXP | ||
| CVE-2021-29447 | 中危 | 7.1 | 90.1% | PoCEXP | ||
| WordPress takeover detection | 高危 | — | — | PoCEXP | ||
| WordPress gtranslate Plugin Directory Listing | 低危 | — | — | PoCEXP | ||
| WordPress bbPress Plugin Directory Listing | 低危 | — | — | PoCEXP | ||
| WordPress <= 5.2.4 - Unauthenticated View Private/Draft Posts | 中危 | 5.3 | 70.8% | PoCEXP | ||
| CVE-2019-9787 | 高危 | 8.8 | 87.0% | PoCEXP | ||
| WordPress Core 5.0.0 - Crop-image Shell Upload | 中危 | 6.5 | 93.5% | PoCEXP | ||
| CVE-2019-8942 | 高危 | 8.8 | 91.0% | PoCEXP | ||
| CVE-2018-6389 | 高危 | 7.5 | 89.6% | PoCEXP | ||
| CVE-2017-1001000 | 高危 | 7.5 | 80.4% | PoCEXP | ||
| CVE-2017-5487 | 中危 | 5.3 | 92.4% | PoCEXP | ||
| CVE-2016-10045 | 严重 | 9.8 | 93.8% | PoCEXP | ||
| CVE-2014-9034 | 中危 | 5.0 | 72.5% | PoCEXP |