目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

DesignThemes 厂商漏洞列表 / CVE 中文分析 38

DesignThemes 厂商相关 38 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

DesignThemes 主要提供 WordPress 主题及模板解决方案。截至最新统计，其已收录 38 条 CVE，历史漏洞多集中于跨站脚本（XSS）、远程代码执行（RCE）及不安全的反序列化。部分版本存在未授权访问与文件包含风险，攻击者常利用配置缺陷或输入验证缺失获取系统权限。建议用户及时更新组件并严格实施访问控制，以缓解潜在的安全威胁。

上位製品 DesignThemes: DesignThemes Core Features Reservation Plugin LMS WeDesignTech Ultimate Booking Addon DesignThemes Directory Addon DesignThemes Portfolio VEDA - MultiPurpose WordPress Theme LMS Elementor Pro Dental Clinic OneLife Vivagh Kids Heaven WeDesignTech Portfolio DesignThemes Portfolio Addon DesignThemes LMS Addon HomeFix Elementor Portfolio DesignThemes Core DesignThemes Booking Manager DesignThemes LMS Insurance Triss Solar Energy VEDA Kriya Single Property Knowledge Base Ofiz - WordPress Business Consulting Theme Invico - WordPress Consulting Business Theme Visual Art | Gallery WordPress Theme Red Art
CVE IDタイトルCVSS深刻度公開日
CVE-2025-52833 WordPress LMS theme <= 9.2 - SQL Injection Vulnerability — LMSCWE-89 9.3 Critical2025-07-04
CVE-2025-52799 WordPress LMS theme <= 9.2 - Reflected Cross Site Scripting (XSS) Vulnerability — LMSCWE-79 7.1 High2025-06-27
CVE-2025-31924 WordPress Crafts & Arts theme <= 2.5 - PHP Object Injection Vulnerability — Crafts & ArtsCWE-502 8.8 High2025-05-23
CVE-2025-32284 WordPress Pet World theme <= 2.8 - PHP Object Injection Vulnerability — Pet WorldCWE-502 8.8 High2025-05-23
CVE-2025-32293 WordPress Finance Consultant theme <= 2.8 - PHP Object Injection Vulnerability — Finance ConsultantCWE-502 8.8 High2025-05-23
CVE-2025-0845 DesignThemes Core Features <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — DesignThemes Core FeaturesCWE-79 6.4 Medium2025-03-25
CVE-2024-13471 DesignThemes Core Features <= 4.7 - Missing Authorization to Unauthenticated Arbitrary File Read via dt_process_imported_file — DesignThemes Core FeaturesCWE-22 7.5 High2025-03-05
CVE-2024-13787 VEDA - MultiPurpose WordPress Theme <= 4.2 - Authenticated (Subscriber+) PHP Object Injection — VEDA - MultiPurpose WordPress ThemeCWE-502 9.8 Critical2025-03-05

本页汇总了 DesignThemes 厂商截至目前公开的全部 38 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。