目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

themefic 厂商漏洞列表 / CVE 中文分析 44

themefic 厂商相关 44 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Themefic 主要提供网站主题与模板服务，其开源组件在安全审计中暴露出显著风险。截至最新统计，已收录 36 条 CVE，漏洞类型集中表现为远程代码执行、跨站脚本及权限绕过等常见 Web 安全问题。这些缺陷多源于输入验证缺失或配置不当，反映出开发过程中对安全编码规范的忽视。建议用户及时更新版本并实施严格的访问控制，以降低潜在的攻击面。

Top products by themefic: Tourfic Hydra Booking Ultimate Addons for Contact Form 7 Ultra Addons for Contact Form 7 Tourfic – Travel Booking, Hotel Booking & Car Rental WordPress Plugin Instantio Hydra Booking — Appointment Scheduling & Booking Calendar BEAF Travelfic Toolkit Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings Ultra Addons for WPForms Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin
CVE ID标题CVSS风险等级Published
CVE-2025-39585 WordPress plugin Travelfic Toolkit 跨站脚本漏洞 — Travelfic ToolkitCWE-79 6.5 Medium2025-04-16
CVE-2025-24650 WordPress plugin Tourfic 代码问题漏洞 — TourficCWE-434 9.1 Critical2025-01-24
CVE-2023-47693 WordPress plugin Ultimate Addons for Contact Form 安全漏洞 — Ultimate Addons for Contact Form 7CWE-862 7.5 High2025-01-02
CVE-2024-12032 WordPress plugin Tourfic SQL注入漏洞 — Tourfic – Travel Booking, Hotel Booking & Car Rental WordPress PluginCWE-89 6.5 Medium2024-12-25
CVE-2024-8319 WordPress plugin Tourfic 跨站请求伪造漏洞 — Tourfic – Travel Booking, Hotel Booking & Car Rental WordPress PluginCWE-352 4.3 Medium2024-08-30
CVE-2024-32433 WordPress Plugin Ultimate Before After Image Slider & Gallery 跨站请求伪造漏洞 — BEAFCWE-352 4.3 Medium2024-04-15
CVE-2024-29134 WordPress Plugin Tourfic 跨站脚本漏洞 — TourficCWE-79 6.5 Medium2024-03-19
CVE-2024-29135 WordPress Plugin Tourfic 代码问题漏洞 — TourficCWE-434 9.9 Critical2024-03-19
CVE-2024-29136 WordPress Plugin Tourfic 代码问题漏洞 — TourficCWE-502 8.5 High2024-03-19
CVE-2024-29137 WordPress Plugin Tourfic 跨站脚本漏洞 — TourficCWE-79 7.1 High2024-03-19
CVE-2023-30495 WordPress Plugin Ultimate Addons for Contact Form 7 SQL注入漏洞 — Ultimate Addons for Contact Form 7CWE-89 8.5 High2023-12-20
CVE-2023-49766 WordPress Plugin Ultimate Addons for Contact Form 7 跨站脚本漏洞 — Ultimate Addons for Contact Form 7CWE-79 7.1 High2023-12-14
CVE-2023-30493 WordPress plugin Ultimate Addons for Contact Form 跨站脚本漏洞 — Ultimate Addons for Contact Form 7CWE-79 7.1 High2023-09-27
CVE-2022-47586 WordPress plugin Ultimate Addons for Contact Form 7 SQL注入漏洞 — Ultimate Addons for Contact Form 7CWE-89 8.2 High2023-06-19

本页汇总了 themefic 厂商截至目前公开的全部 44 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。