wp_flexible_shipping_log WordPress Flexible Shipping - Log File Exposure · CloudMap

中危wp_flexible_shipping_log

WordPress Flexible Shipping - Log File Exposure

披露于 2026/01/05 · 更新于 2026/01/12

CVSS 评分—/ 10.0

EPSS 概率—利用概率预测

漏洞描述

Detected exposed log files generated by the Flexible Shipping (flexible-shipping) plugin via WooCommerce logging (wc_get_logger).

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 wordpress 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
wordpress_click2shell WordPress Click2Shell Theme Preview Selector Injection wordpress	高危	—	—	PoCEXP	2026/09/30
CVE-2026-63030 WordPress Core 6.9-7.0.1 - Pre-Auth Blind SQL Injection (Batch-Route Confusion) wordpress	严重	—	—	PoCEXP	2026/07/19
wordpress_wp_env_exposure WordPress Configuration wp-env - Exposure wordpress	低危	—	—	PoCEXP	2026/01/30
wp_links_opml WordPress wp-links-opml.php - Version Disclosure wordpress	低危	—	—	PoCEXP	2026/01/30
wp_xmlrpc_pingback_detection Wordpress XMLRPC - Pingback Detection wordpress	低危	—	—	PoCEXP	2026/01/12
wp_security_hidden_login_exposure WordPress All-in-One Security <=4.4.1 - Hidden Login Page Exposure wordpress	中危	—	—	PoCEXP	2025/12/18