漏洞列表 352348
CVE ID 标题 严重程度 CVSS 发布时间 受影响产品 数据源 操作
CVE-2026-24629
WordPress Web Accessibility with Max Access plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability
MEDIUM 5.9 2026-01-23
Ability, Inc Web Accessibility with Max Access
CVE NVD
CVE-2026-24627
WordPress Trusona for WordPress plugin <= 2.0.0 - Broken Access Control vulnerability
MEDIUM 4.3 2026-01-23
Trusona Trusona for WordPress
CVE NVD
CVE-2026-24626
WordPress Logo Slider plugin <= 4.9.0 - Cross Site Scripting (XSS) vulnerability
MEDIUM 5.9 2026-01-23
LogicHunt Logo Slider
CVE NVD
CVE-2026-24625
WordPress File Uploads Addon for WooCommerce plugin <= 1.7.3 - Broken Access Control vulnerability
MEDIUM 5.3 2026-01-23
Imaginate Solutions File Uploads Addon for WooCommerce
CVE NVD
CVE-2026-24624
WordPress Neoforum plugin <= 1.0 - SQL Injection vulnerability
HIGH 7.2 2026-01-23
saeros1984 Neoforum
CVE NVD
CVE-2026-24623
WordPress Neoforum plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
MEDIUM -1.0 2026-01-23
saeros1984 Neoforum
CVE NVD
CVE-2026-24622
WordPress Suggestion Toolkit plugin <= 5.0 - Broken Access Control vulnerability
MEDIUM 5.4 2026-01-23
Sergiy Dzysyak Suggestion Toolkit
CVE NVD
CVE-2026-24621
WordPress Terms descriptions plugin <= 3.4.9 - Cross Site Scripting (XSS) vulnerability
MEDIUM 4.8 2026-01-23
Vladimir Statsenko Terms descriptions
CVE NVD
CVE-2026-24620
WordPress Landing Page Builder plugin <= 1.5.3.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM -1.0 2026-01-23
PluginOps Landing Page Builder
CVE NVD
CVE-2026-24619
WordPress PopCash.Net Code Integration Tool plugin <= 1.8 - Broken Access Control vulnerability
MEDIUM 5.3 2026-01-23
PopCash PopCash.Net Code Integration Tool
CVE NVD
CVE-2026-24617
WordPress Easy Modal plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability
MEDIUM 6.5 2026-01-23
Daniel Iser Easy Modal
CVE NVD
CVE-2026-24616
WordPress WP Popups plugin <= 2.2.0.3 - Broken Access Control vulnerability
MEDIUM 6.5 2026-01-23
Damian WP Popups
CVE NVD
CVE-2026-24615
WordPress Cream Magazine theme <= 2.1.10 - Broken Access Control vulnerability
MEDIUM 5.3 2026-01-23
themebeez Cream Magazine
CVE NVD
CVE-2026-24614
WordPress Flex QR Code Generator plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability
MEDIUM 5.9 2026-01-23
Devsbrain Flex QR Code Generator
CVE NVD
CVE-2026-24613
WordPress Ecwid Shopping Cart plugin <= 7.0.5 - Broken Access Control vulnerability
MEDIUM 5.3 2026-01-23
Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart
CVE NVD
CVE-2026-24612
WordPress Orchid Store theme <= 1.5.15 - Broken Access Control vulnerability
MEDIUM 5.3 2026-01-23
themebeez Orchid Store
CVE NVD
CVE-2026-24609
WordPress Laurent theme <= 3.1 - Local File Inclusion vulnerability
HIGH 7.5 2026-01-23
Elated-Themes Laurent
CVE NVD
CVE-2026-24608
WordPress Laurent Core plugin <= 2.4.1 - Local File Inclusion vulnerability
HIGH 7.5 2026-01-23
Elated-Themes Laurent Core
CVE NVD
CVE-2026-24607
WordPress Travel Monster theme <= 1.3.3 - Broken Access Control vulnerability
MEDIUM 5.3 2026-01-23
wptravelengine Travel Monster
CVE NVD
CVE-2026-24606
WordPress Bayarcash WooCommerce plugin <= 4.3.11 - Broken Access Control vulnerability
MEDIUM 5.3 2026-01-23
Web Impian Bayarcash WooCommerce
CVE NVD