VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2022-3805RCE Jeg Elementor Kit < 2.5.7 - Unauthenticated Settings Update jeg-elementor-kit	未授权访问	高危	7.5	1.6%	PoC	2025/10/04
CVE-2022-3124RCE Frontend File Manager < 21.3 - Unauthenticated File Renaming nmedia-user-file-uploader	文件上传	中危	5.3	8.3%	PoC	2025/10/04
CVE-2022-25322 ZEROF Web Server 2.0 - SQL Injection web_server	SQL注入	严重	9.8	8.3%	PoC	2025/10/04
CVE-2022-3590 WordPress <= 6.2 - Server Side Request Forgery wordpress	服务端请求伪造	中危	5.9	3.2%	PoC	2025/10/04
CVE-2022-2461RCE Transposh WordPress Translation <= 1.0.8 - Unauthenticated Settings Change transposh_wordpress_translation	远程代码执行	中危	5.3	4.8%	PoC	2025/10/04
CVE-2022-38840RCE Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE) man-eam-0003	XML外部实体引用	高危	7.5	9.8%	PoC	2025/10/04
CVE-2022-3481RCE NotificationX Dropshipping < 4.4 - SQL Injection woocommerce-dropshipping	SQL注入	严重	9.8	3.9%	PoC	2025/10/04
CVE-2022-38627 Nortek Linear eMerge E3-Series - SQL Injection emerge_e3_firmware	SQL注入	严重	9.8	4.3%	PoC	2025/10/04
CVE-2016-10972 Newspaper Theme 6.4–6.7.1 - Privilege Escalation newspaper	访问控制错误	严重	9.8	9.3%	PoC	2025/10/04
CVE-2018-1217 Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager - Invalid Access Control emc_avamar emc_integrated_data_protection_appliance	访问控制错误	严重	9.8	50.9%	PoC	2025/10/04
CVE-2021-34624RCE WordPress ProfilePress 3.0-3.1.3 - Arbitrary File Upload profilepress	未授权访问	严重	9.8	6.7%	PoC	2025/10/04
CVE-2021-34622 WordPress ProfilePress <= 3.1.3 - Privilege Escalation profilepress	访问控制错误	高危	8.8	4.1%	PoC	2025/10/04
CVE-2021-42359RCE WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Arbitrary Post Deletion wp_dsgvo_tools	身份验证绕过	严重	9.1	3.8%	PoC	2025/10/04
CVE-2021-24527 Profile Builder < 3.4.9 - Improper Authentication profile_builder	身份验证绕过	严重	9.8	7.6%	PoC	2025/10/04
CVE-2021-24175 The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass the_plus_addons_for_elementor	身份验证绕过	严重	9.8	14.5%	PoC	2025/10/04
CVE-2021-24644 Images to WebP < 1.9 - Authenticated Local File Inclusion images_to_webp	文件包含	高危	7.5	4.9%	PoC	2025/10/04
CVE-2021-24878 SupportCandy < 2.2.7 - Reflected Cross-Site Scripting supportcandy	跨站脚本攻击	中危	6.1	1.2%	PoC	2025/10/04
CVE-2021-4380 Pinterest Automatic < 4.14.4 - Unauthenticated Arbitrary Options Update pinterest_automatic_pin	身份验证绕过	严重	9.8	4.5%	PoC	2025/10/04
CVE-2021-24170 User Profile Picture < 2.5.0 - Sensitive Information Disclosure user_profile_picture	信息泄露	高危	7.5	4.8%	PoC	2025/10/04
CVE-2021-24876 Registrations for The Events Calendar < 2.7.5 - Authenticated Reflected Cross-Site Scripting registrations_for_the_events_calendar	跨站脚本攻击	中危	6.1	1.2%	PoC	2025/10/04