目標達成 すべての支援者に感謝 — 100%達成しました!

目標: 1000 CNY · 調達済み: 1336 CNY

100%

wpengine 厂商漏洞列表 / CVE 中文分析 8

wpengine 厂商相关 8 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。

该厂商提供托管 WordPress 服务,专注于企业级网站托管与安全解决方案。历史上曾报告过多种漏洞类型,包括跨站脚本(XSS)、远程代码执行(RCE)和权限绕过等问题。其安全特性包含自动更新、恶意软件扫描和DDoS防护,但2021年曾发生一起数据泄露事件,影响部分客户账户信息。尽管存在安全风险,该平台仍通过持续的安全更新和监控机制维护其服务安全性。

CVE IDタイトルCVSS深刻度公開日
CVE-2026-8382 Advanced Custom Fields (ACF®) <= 6.8.1 - Unauthenticated Arbitrary Post Modification via Front-End Form '_post_title' and '_post_content' Parameters — Advanced Custom Fields (ACF®)CWE-862 5.3 Medium2026-05-31
CVE-2026-4029 Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Database Export — Database Backup for WordPressCWE-862 7.5 High2026-05-14
CVE-2026-4030 Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Arbitrary File Read and Deletion — Database Backup for WordPressCWE-862 8.1 High2026-05-14
CVE-2026-4031 Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Database Backup Interception — Database Backup for WordPressCWE-862 7.5 High2026-05-14
CVE-2026-4812 Advanced Custom Fields (ACF®) <= 6.7.0 - Unauthenticated Missing Authorization to Arbitrary Post/Page Disclosure via AJAX Field Query Parameters — Advanced Custom Fields (ACF®)CWE-862 5.3 Medium2026-04-15
CVE-2025-11427 WP Migrate Lite <= 2.7.6 - Unauthenticated Blind Server-Side Request Forgery — WP Migrate Lite – Migration Made EasyCWE-918 5.8 Medium2025-11-18
CVE-2023-6701 Advanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field — Advanced Custom Fields (ACF®)CWE-79 6.4 Medium2024-02-05
CVE-2023-6933 Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection — Better Search ReplaceCWE-502 8.8 High2024-02-05

本页汇总了 wpengine 厂商截至目前公开的全部 8 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。