UNKNOWN 厂商相关 4582 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
“Unknown”并非特定厂商，而是指代身份不明的软件组件或开源项目，其核心用途因具体代码库而异，通常涉及基础功能模块。由于缺乏明确维护主体，该类别历史上常暴露远程代码执行、跨站脚本及身份验证绕过等高危漏洞，主要源于代码审计缺失。截至最新统计已收录4141条CVE，凸显供应链安全风险。建议开发者严格审查第三方依赖，及时更新补丁以防范潜在攻击。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2021-24849 | WordPress SQL注入漏洞 — WCFM Marketplace – Best Multivendor Marketplace for WooCommerceCWE-89 | 9.8 | - | 2021-12-21 |
| CVE-2021-24846 | WordPress 插件 SQL注入漏洞 — Ni WooCommerce Custom Order StatusCWE-89 | 8.8 | - | 2021-12-21 |
| CVE-2021-24750 | WordPress SQL注入漏洞 — WP Visitor Statistics (Real Time Traffic)CWE-89 | 8.8 | - | 2021-12-21 |
| CVE-2021-24739 | WordPress 插件授权问题漏洞 — Logo Carousel – Logo Slider, Logo Showcase, and Clients Logo GalleryCWE-639 | 8.1 | - | 2021-12-21 |
| CVE-2021-24738 | WordPress 插件跨站脚本漏洞 — Logo Carousel – Logo Slider, Logo Showcase, and Clients Logo GalleryCWE-79 | 5.4 | - | 2021-12-21 |
| CVE-2021-24578 | WordPress 插件跨站脚本漏洞 — SportsPress – Sports Club & League ManagerCWE-79 | 6.1 | - | 2021-12-21 |
| CVE-2021-24972 | WordPress 跨站脚本漏洞 — Pixel Cat – Conversion Pixel ManagerCWE-79 | 4.8 | - | 2021-12-13 |
| CVE-2021-24970 | WordPress 插件路径遍历漏洞 — All-in-One Video GalleryCWE-22 | 7.2 | - | 2021-12-13 |
| CVE-2021-24955 | WordPress 插件跨站脚本漏洞 — User Registration, Login Form, User Profile & Membership – ProfilePress (Formerly WP User Avatar)CWE-79 | 6.1 | - | 2021-12-13 |
| CVE-2021-24954 | WordPress 插件 跨站脚本漏洞 — User Registration, Login Form, User Profile & Membership – ProfilePress (Formerly WP User Avatar)CWE-79 | 6.1 | - | 2021-12-13 |
| CVE-2021-24951 | WordPress和WordPress 插件 SQL注入漏洞 — LearnPress – WordPress LMS PluginCWE-89 | 7.2 | - | 2021-12-13 |
| CVE-2021-24946 | WordPress SQL注入漏洞 — Modern Events Calendar LiteCWE-89 | 9.8 | - | 2021-12-13 |
| CVE-2021-24945 | WordPress Plugins Like Button Rating LikeBtn 跨站请求伪造漏洞 — Like Button Rating ♥ LikeBtnCWE-200 | 6.5 | - | 2021-12-13 |
| CVE-2021-24932 | WordPress 插件跨站脚本漏洞 — Auto Featured Image (Auto Post Thumbnail)CWE-79 | 6.1 | - | 2021-12-13 |
| CVE-2021-24925 | WordPress 插件跨站脚本漏洞 — Modern Events Calendar LiteCWE-79 | 6.1 | - | 2021-12-13 |
| CVE-2021-24922 | WordPress 插件跨站请求伪造漏洞 — Pixel Cat – Conversion Pixel ManagerCWE-352 | 8.2 | - | 2021-12-13 |
| CVE-2021-24896 | WordPress 插件跨站脚本漏洞 — Caldera Forms – More Than Contact FormsCWE-79 | 4.8 | - | 2021-12-13 |
| CVE-2021-24872 | WordPress 插件安全漏洞 — Get Custom Field ValuesCWE-863 | 6.5 | - | 2021-12-13 |
| CVE-2021-24871 | WordPress 插件跨站脚本漏洞 — Get Custom Field ValuesCWE-79 | 5.4 | - | 2021-12-13 |
| CVE-2021-24863 | WordPress和WordPress 插件 SQL注入漏洞 — WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBotsCWE-89 | 7.2 | - | 2021-12-13 |
| CVE-2021-24861 | WordPress和WordPress 插件 SQL注入漏洞 — Quotes CollectionCWE-89 | 7.2 | - | 2021-12-13 |
| CVE-2021-24859 | WordPress 插件访问控制错误漏洞 — User meta shortcodesCWE-284 | 4.3 | - | 2021-12-13 |
| CVE-2021-24857 | WordPress 插件代码问题漏洞 — ToTop LinkCWE-502 | 9.8 | - | 2021-12-13 |
| CVE-2021-24855 | WordPress 插件跨站脚本漏洞 — Display Post MetadataCWE-79 | 5.4 | - | 2021-12-13 |
| CVE-2021-24848 | WordPress SQL注入漏洞 — Mediamatic – Media Library FoldersCWE-89 | 8.8 | - | 2021-12-13 |
| CVE-2021-24845 | WordPress plugin Improved Include Page 安全漏洞 — Improved Include PageCWE-284 | 6.5 | - | 2021-12-13 |
| CVE-2021-24836 | WordPress plugin Temporary Login Without Password 跨站请求伪造漏洞 — Temporary Login Without PasswordCWE-862 | 4.3 | - | 2021-12-13 |
| CVE-2021-24819 | WordPress 插件安全漏洞 — Page/Post Content ShortcodeCWE-863 | 4.3 | - | 2021-12-13 |
| CVE-2021-24818 | WordPress 插件 跨站请求伪造漏洞 — Wp LimitsCWE-352 | 4.3 | - | 2021-12-13 |
| CVE-2021-24817 | WordPress 插件跨站脚本漏洞 — Ultimate NofollowCWE-79 | 5.4 | - | 2021-12-13 |
本页汇总了 UNKNOWN 厂商截至目前公开的全部 4582 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。