目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1000

100.0%

themehigh 厂商漏洞列表 / CVE 中文分析 11

themehigh 厂商相关 11 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。

Themehigh 是一家专注于 WordPress 插件开发的公司,其产品主要用于增强网站功能和用户体验。历史上,其插件多次曝出安全漏洞,主要包括跨站脚本(XSS)、权限绕过和远程代码执行(RCE)等类型。截至最新统计,已有 11 条 CVE 记录在案,反映了其在安全编码方面的持续挑战。用户在使用其插件时应保持警惕,及时更新至最新版本,并定期进行安全审计。

CVE ID标题CVSS风险等级Published
CVE-2026-3231 WordPress plugin Checkout Field Editor (Checkout Manager) for WooCommerce 跨站脚本漏洞 — Checkout Field Editor (Checkout Manager) for WooCommerceCWE-79 7.2 High2026-03-11
CVE-2025-13974 WordPress plugin Email Customizer for WooCommerce 跨站脚本漏洞 — Email Customizer for WooCommerce | Drag and Drop Email Templates BuilderCWE-79 4.4 Medium2026-01-07
CVE-2025-67556 WordPress plugin Advanced FAQ Manager 跨站脚本漏洞 — Advanced FAQ ManagerCWE-79 5.9 Medium2025-12-09
CVE-2025-67553 WordPress plugin Advanced FAQ Manager 跨站脚本漏洞 — Advanced FAQ ManagerCWE-79 6.5 Medium2025-12-09
CVE-2025-49077 WordPress plugin Dynamic Pricing and Discount Rules 跨站请求伪造漏洞 — Dynamic Pricing and Discount RulesCWE-352 4.3 Medium2025-06-06
CVE-2024-8499 WordPress plugin Checkout Field Editor for WooCommerce 跨站脚本漏洞 — Checkout Field Editor (Checkout Manager) for WooCommerceCWE-79 4.7 Medium2024-10-04
CVE-2024-35658 WordPress plugin Checkout Field Editor for WooCommerce 路径遍历漏洞 — Checkout Field Editor for WooCommerce (Pro)CWE-22 8.6 High2024-06-10
CVE-2024-32781 WordPress plugin Email Customizer for WooCommerce 信息泄露漏洞 — Email Customizer for WooCommerceCWE-200 7.5 High2024-04-24
CVE-2024-0705 WordPress Plugin Stripe Payment Plugin for WooCommerce 安全漏洞 — Payment Gateway of Stripe for WooCommerceCWE-89 9.8 Critical2024-01-19
CVE-2023-51545 WordPress Plugin Job Manager & Career 代码问题漏洞 — Job Manager & Career – Manage job board listings, and recruitmentsCWE-352 9.6 Critical2023-12-29
CVE-2023-3162 WordPress plugin Stripe Payment Plugin for WooCommerce 安全漏洞 — Payment Gateway of Stripe for WooCommerceCWE-288 9.8 Critical2023-08-31

本页汇总了 themehigh 厂商截至目前公开的全部 11 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。