smub 厂商相关 92 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
smub 主要涉及软件供应链安全领域，旨在识别和缓解开源组件风险。其收录的 75 条 CVE 多集中于远程代码执行、跨站脚本及权限绕过等高危类型，反映出组件在输入验证与访问控制方面的普遍缺陷。值得关注的是，该项目通过持续追踪漏洞数据，为开发者提供了关键的风险预警机制，有助于在集成第三方库前评估潜在威胁，提升整体系统的安全性。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-12377 | WordPress plugin Gallery Plugin for WordPress – Envira Photo Gallery 安全漏洞 — Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & MoreCWE-862 | 4.3 | Medium | 2025-11-13 |
| CVE-2025-11448 | WordPress plugin Envira Photo Gallery 安全漏洞 — Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & MoreCWE-862 | 4.3 | Medium | 2025-11-08 |
| CVE-2025-12837 | WordPress plugin aThemes Addons for Elementor 跨站脚本漏洞 — aThemes Addons for ElementorCWE-79 | 6.4 | Medium | 2025-11-08 |
| CVE-2025-11271 | WordPress plugin Easy Digital Downloads 安全漏洞 — Easy Digital Downloads – eCommerce Payments and Subscriptions made easyCWE-807 | 5.3 | Medium | 2025-11-06 |
| CVE-2025-11893 | WordPress plugin Charitable 安全漏洞 — Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & MoreCWE-89 | 6.5 | Medium | 2025-10-25 |
| CVE-2025-10694 | WordPress plugin User Feedback 安全漏洞 — UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in SecondsCWE-862 | 5.3 | Medium | 2025-10-25 |
| CVE-2025-8149 | WordPress plugin aThemes Addons for Elementor 跨站脚本漏洞 — aThemes Addons for ElementorCWE-79 | 6.4 | Medium | 2025-09-06 |
| CVE-2025-8102 | WordPress plugin Easy Digital Downloads 跨站请求伪造漏洞 — Easy Digital Downloads – eCommerce Payments and Subscriptions made easyCWE-352 | 5.4 | Medium | 2025-08-20 |
| CVE-2025-5275 | WordPress plugin Charitable 跨站脚本漏洞 — Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & MoreCWE-79 | 4.4 | Medium | 2025-06-26 |
| CVE-2025-4577 | WordPress plugin Smash Balloon Social Post Feed 跨站脚本漏洞 — Smash Balloon Social Post Feed – Simple Social Feeds for WordPressCWE-79 | 6.4 | Medium | 2025-06-10 |
| CVE-2025-4670 | WordPress plugin Easy Digital Downloads 跨站脚本漏洞 — Easy Digital Downloads – eCommerce Payments and Subscriptions made easyCWE-79 | 6.4 | Medium | 2025-05-29 |
| CVE-2025-2892 | WordPress plugin All in One SEO 跨站脚本漏洞 — All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase TrafficCWE-79 | 6.4 | Medium | 2025-05-19 |
| CVE-2025-3794 | WordPress plugin WPForms 跨站脚本漏洞 — WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & MoreCWE-79 | 5.4 | Medium | 2025-05-09 |
| CVE-2025-2252 | WordPress plugin Easy Digital Downloads 信息泄露漏洞 — Easy Digital Downloads – eCommerce Payments and Subscriptions made easyCWE-200 | 5.3 | Medium | 2025-03-25 |
| CVE-2025-1314 | WordPress plugin Custom Twitter Feeds 跨站请求伪造漏洞 — Custom Twitter Feeds – A Tweets Widget or X Feed WidgetCWE-352 | 4.3 | Medium | 2025-03-20 |
| CVE-2024-13403 | WordPress plugin WPForms 跨站脚本漏洞 — WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & MoreCWE-79 | 6.4 | Medium | 2025-02-04 |
| CVE-2024-13547 | WordPress plugin aThemes Addons for Elementor 跨站脚本漏洞 — aThemes Addons for ElementorCWE-79 | 6.4 | Medium | 2025-02-01 |
| CVE-2024-13453 | WordPress plugin The Contact Form & SMTP Plugin for WordPress by PirateForms 代码注入漏洞 — Contact Form & SMTP Plugin for WordPress by PirateFormsCWE-94 | 7.3 | High | 2025-01-30 |
| CVE-2024-13517 | WordPress plugin Easy Digital Downloads 跨站脚本漏洞 — Easy Digital Downloads – eCommerce Payments and Subscriptions made easyCWE-79 | 4.4 | Medium | 2025-01-18 |
| CVE-2024-12875 | WordPress plugin Easy Digital Downloads 安全漏洞 — Easy Digital Downloads – eCommerce Payments and Subscriptions made easyCWE-73 | 4.9 | Medium | 2024-12-21 |
| CVE-2024-9654 | WordPress plugin Easy Digital Downloads 安全漏洞 — Easy Digital Downloads – eCommerce Payments and Subscriptions made easyCWE-863 | 3.7 | Low | 2024-12-17 |
| CVE-2024-11205 | WordPress plugin WPForms 安全漏洞 — WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & MoreCWE-862 | 8.5 | High | 2024-12-10 |
| CVE-2024-10878 | WordPress plugin Sugar Calendar 跨站脚本漏洞 — Sugar Calendar – Events Calendar, Event Tickets, and Events Management PlatformCWE-79 | 6.1 | Medium | 2024-11-26 |
| CVE-2024-10593 | WordPress plugin WPForms 跨站请求伪造漏洞 — WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & MoreCWE-352 | 4.3 | Medium | 2024-11-13 |
| CVE-2024-10876 | WordPress plugin Charitable 跨站脚本漏洞 — Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & MoreCWE-79 | 6.1 | Medium | 2024-11-09 |
| CVE-2024-10045 | WordPress plugin Transients Manager 跨站请求伪造漏洞 — Transients ManagerCWE-352 | 4.3 | Medium | 2024-10-23 |
| CVE-2022-2439 | WordPress plugin Easy Digital Downloads 代码问题漏洞 — Easy Digital Downloads – eCommerce Payments and Subscriptions made easyCWE-502 | 7.2 | High | 2024-09-24 |
| CVE-2024-8791 | WordPress plugin Donation Forms by Charitable 安全漏洞 — Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & MoreCWE-639 | 9.8 | Critical | 2024-09-24 |
| CVE-2024-8199 | WordPress plugin Reviews Feed 安全漏洞 — Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and MoreCWE-862 | 4.3 | Medium | 2024-08-27 |
| CVE-2024-8200 | WordPress plugin Reviews Feed 安全漏洞 — Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and MoreCWE-352 | 4.3 | Medium | 2024-08-27 |
本页汇总了 smub 厂商截至目前公开的全部 92 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。