目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1000 元

100.0%
请我们喝杯咖啡

wp-buy 厂商漏洞列表 / CVE 中文分析 23

wp-buy 厂商相关 23 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

wp-buy 是一款基于 WordPress 的电商插件，旨在为网站提供商品展示与在线交易功能。截至最新统计，该组件已收录 23 条 CVE，历史漏洞多集中于未授权访问、SQL 注入及跨站脚本攻击，反映出输入验证与权限控制方面的不足。部分高危漏洞允许攻击者远程执行代码或窃取敏感数据。建议用户及时更新版本并严格遵循最小权限原则，以缓解潜在的安全风险。

Top products by wp-buy: WP Content Copy Protection & No Right Click WP Maintenance Mode & Site Under Construction Visitor Traffic Real Time Statistics Login as User or Customer (User Switching) SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin) WP Content Copy Protection & No Right Click (WordPress plugin) 404 Image Redirection (Replace Broken Images) wordpress related Posts with thumbnails Related Posts Widget with Thumbnails Limit Login Attempts Visitors Traffic Real Time Statistics WP Popup Window Maker Limit Login Attempts (Spam Protection) Login Protection – Limit Failed Login Attempts Tree Sitemap (Pages, Posts & Categories list) WooCommerce Conditional Marketing Mailer Captchinoo, Google recaptcha for admin login page
CVE ID标题CVSS风险等级Published
CVE-2026-2936 WordPress plugin Visitor Traffic Real Time Statistics 跨站脚本漏洞 — Visitor Traffic Real Time StatisticsCWE-79 7.2 High2026-04-04
CVE-2025-49284 WordPress plugin WP Maintenance Mode & Site Under Construction 跨站请求伪造漏洞 — WP Maintenance Mode & Site Under ConstructionCWE-352 4.3 Medium2025-06-06
CVE-2025-32266 WordPress plugin 404 Image Redirection (Replace Broken Images) 跨站请求伪造漏洞 — 404 Image Redirection (Replace Broken Images)CWE-352 4.3 Medium2025-04-04
CVE-2025-31570 WordPress plugin Related Posts Widget with Thumbnails 跨站请求伪造漏洞 — Related Posts Widget with ThumbnailsCWE-352 7.1 High2025-03-31
CVE-2025-31569 WordPress plugin wordpress related Posts with thumbnails 跨站请求伪造漏洞 — wordpress related Posts with thumbnailsCWE-352 7.1 High2025-03-31
CVE-2023-47557 WordPress plugin Visitors Traffic Real Time Statistics 安全漏洞 — Visitors Traffic Real Time StatisticsCWE-862 4.3 Medium2025-01-02
CVE-2024-54234 WordPress plugin Limit Login Attempts SQL注入漏洞 — Limit Login AttemptsCWE-89 9.3 Critical2024-12-13
CVE-2024-52421 WordPress plugin WP Popup Window Maker 安全漏洞 — WP Popup Window MakerCWE-352 7.1 High2024-11-19
CVE-2024-49306 WordPress plugin WP Content Copy Protection & No Right Click 跨站请求伪造漏洞 — WP Content Copy Protection & No Right ClickCWE-352 4.3 Medium2024-10-20
CVE-2022-4534 WordPress plugin Limit Login Attempts 安全漏洞 — Limit Login Attempts (Spam Protection)CWE-348 5.3 Medium2024-10-08
CVE-2023-51484 WordPress plugin Login as User or Customer 授权问题漏洞 — Login as User or Customer (User Switching)CWE-287 9.8 Critical2024-04-25
CVE-2023-36678 WordPress plugin WP Content Copy Protection & No Right Click 跨站脚本漏洞 — WP Content Copy Protection & No Right ClickCWE-79 5.9 Medium2023-08-05
CVE-2022-40695 WordPress plugin SEO Redirection 跨站请求伪造漏洞 — SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin)CWE-352 5.4 Medium2022-11-18
CVE-2022-38704 WordPress plugin SEO Redirection 跨站请求伪造漏洞 — SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin)CWE-352 5.4 Medium2022-09-23
CVE-2022-23983 WordPress plugin 跨站请求伪造漏洞 — WP Content Copy Protection & No Right Click (WordPress plugin)CWE-352 4.3 Medium2022-02-21
CVE-2021-24195 WordPress plugin Login as User or Customer 安全漏洞 — Login as User or Customer (User Switching)CWE-285 8.8 -2021-05-14
CVE-2021-24194 WordPress plugin Login Protection - Limit Failed Login Attempts 安全漏洞 — Login Protection – Limit Failed Login AttemptsCWE-285 8.8 -2021-05-14
CVE-2021-24193 WordPress plugin Visitor Traffic Real Time Statistics 安全漏洞 — Visitor Traffic Real Time StatisticsCWE-285 8.8 -2021-05-14
CVE-2021-24192 WordPress plugin Tree Sitemap 安全漏洞 — Tree Sitemap (Pages, Posts & Categories list)CWE-285 8.8 -2021-05-14
CVE-2021-24191 WordPress plugin WP Maintenance Mode & Site Under Construction 安全漏洞 — WP Maintenance Mode & Site Under ConstructionCWE-285 8.8 -2021-05-14
CVE-2021-24190 WordPress plugin WooCommerce Conditional Marketing Mailer 安全漏洞 — WooCommerce Conditional Marketing MailerCWE-285 8.8 -2021-05-14
CVE-2021-24189 WordPress plugin 授权问题漏洞 — Captchinoo, Google recaptcha for admin login pageCWE-285 8.8 -2021-05-14
CVE-2021-24188 WordPress plugin WP Maintenance Mode & Site Under Construction 安全漏洞 — WP Content Copy Protection & No Right ClickCWE-285 8.8 -2021-05-14

本页汇总了 wp-buy 厂商截至目前公开的全部 23 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。