Cozmoslabs 厂商相关 40 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
Cozmoslabs 主要提供企业级内容管理系统及数字资产管理解决方案，其核心产品广泛应用于媒体与出版行业。历史漏洞分析显示，该厂商软件曾频繁出现远程代码执行、跨站脚本及越权访问等高危缺陷，累计收录 CVE 达 40 条。这些漏洞多源于输入验证不足或权限逻辑缺陷。尽管部分版本已修复，但攻击面仍较广，建议用户及时更新补丁并严格配置访问控制策略以防范潜在风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-11835 | WordPress plugin Paid Membership Subscriptions 安全漏洞 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content RestrictionCWE-862 | 5.3 | Medium | 2025-11-05 |
| CVE-2024-12919 | WordPress plugin Paid Membership Subscriptions 授权问题漏洞 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content RestrictionCWE-287 | 9.8 | Critical | 2025-01-14 |
| CVE-2024-11291 | WordPress plugin Paid Membership Subscriptions 信息泄露漏洞 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content RestrictionCWE-200 | 5.3 | Medium | 2024-12-18 |
| CVE-2024-10261 | WordPress plugin The Paid Membership Subscriptions 代码注入漏洞 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content RestrictionCWE-94 | 7.3 | High | 2024-11-09 |
| CVE-2024-9222 | WordPress plugin Paid Membership Subscriptions 跨站脚本漏洞 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content RestrictionCWE-79 | 6.1 | Medium | 2024-10-02 |
| CVE-2024-1389 | WordPress Plugin Paid Membership Subscriptions 安全漏洞 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content RestrictionCWE-862 | 5.3 | Medium | 2024-02-20 |
| CVE-2024-1390 | WordPress Plugin Paid Membership Subscriptions 安全漏洞 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content RestrictionCWE-862 | 4.3 | Medium | 2024-02-20 |
本页汇总了 Cozmoslabs 厂商截至目前公开的全部 40 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。