目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1000 元

100.0%
请我们喝杯咖啡

PluginOps 厂商漏洞列表 / CVE 中文分析 15

PluginOps 厂商相关 15 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

PluginOps 是专注于插件生态系统管理的开源项目，旨在简化插件的安装、更新和安全监控。历史上，其常见漏洞类型包括远程代码执行（RCE）、跨站脚本（XSS）和权限越权，主要源于插件间交互机制和权限管理缺陷。截至最新统计，该项目已记录 15 条 CVE，其中多个高危漏洞涉及未经验证的输入处理和不当的权限验证。安全团队建议定期更新并严格审查插件权限配置以降低风险。

Top products by PluginOps: Landing Page Builder Feather Login Page MailChimp Subscribe Forms MailChimp Subscribe Form Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress Landing Pages MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder Social Locker Top Bar Testimonial Slider
CVE ID标题CVSS风险等级Published
CVE-2026-24620 WordPress plugin Landing Page Builder 跨站脚本漏洞 — Landing Page BuilderCWE-79 5.9 Medium2026-01-23
CVE-2025-62107 WordPress plugin Feather Login Page 跨站请求伪造漏洞 — Feather Login PageCWE-352 4.3 Medium2025-12-22
CVE-2025-60126 WordPress plugin Testimonial Slider 安全漏洞 — Testimonial SliderCWE-98 8.8 High2025-09-26
CVE-2025-30581 WordPress plugin Top Bar 安全漏洞 — Top BarCWE-862 5.3 Medium2025-03-24
CVE-2025-22727 WordPress plugin MailChimp Subscribe Forms 跨站脚本漏洞 — MailChimp Subscribe FormsCWE-79 6.5 Medium2025-01-21
CVE-2024-51858 WordPress plugin Social Locker 跨站脚本漏洞 — Social LockerCWE-79 6.5 Medium2024-11-19
CVE-2024-43211 WordPress plugin MailChimp Subscribe Forms 安全漏洞 — MailChimp Subscribe FormsCWE-79 5.9 Medium2024-11-01
CVE-2024-43345 WordPress plugin Landing Page Builder 路径遍历漏洞 — Landing Page BuilderCWE-22 7.5 High2024-08-19
CVE-2024-34752 WordPress plugin Landing Page Builder 跨站脚本漏洞 — Landing Page BuilderCWE-79 7.1 High2024-05-17
CVE-2024-31923 WordPress Plugin Feather Login Page Designer 跨站请求伪造漏洞 — Feather Login PageCWE-352 4.3 Medium2024-04-15
CVE-2024-30452 WordPress Plugin Landing Page Builder 跨站脚本漏洞 — Landing Page BuilderCWE-79 5.9 Medium2024-03-29
CVE-2023-32517 WordPress Plugin MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder 输入验证错误漏洞 — MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form BuilderCWE-601 4.7 Medium2023-12-29
CVE-2023-48325 WordPress Plugin Landing Page Builder 输入验证错误漏洞 — Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress Landing PagesCWE-601 4.7 Medium2023-12-07
CVE-2023-40675 WordPress plugin Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress Landing Pages 跨站脚本漏洞 — Landing Page BuilderCWE-79 5.9 Medium2023-09-27
CVE-2023-33328 WordPress plugin MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder 4.0.9.1及 跨站脚本漏洞 — MailChimp Subscribe FormCWE-79 5.9 Medium2023-05-28

本页汇总了 PluginOps 厂商截至目前公开的全部 15 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。