目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

wpmanageninja 厂商漏洞列表 / CVE 中文分析 14

wpmanageninja 厂商相关 14 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

wpmanageninja 是一款 WordPress 管理工具，旨在简化网站维护任务。历史上，该项目曾存在多种安全漏洞，包括远程代码执行（RCE）、跨站脚本（XSS）和权限绕过等风险。这些漏洞主要源于输入验证不足和权限控制缺陷。截至最新统计，该项目已记录 3 条 CVE 漏洞，提醒用户及时更新版本并加强安全配置，以防范潜在攻击。

上位製品 wpmanageninja: Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Ninja Tables Fluent PDF Generator FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler FluentCart Best Payments Plugin for WP Fluent CRM Fluent Support Fluent Support – Helpdesk & Customer Support Ticket System FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP
CVE IDタイトルCVSS深刻度公開日
CVE-2026-61964 WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability — Ninja TablesCWE-79 7.1 High2026-08-06
CVE-2026-16636 FluentSMTP <= 2.2.95 - Unauthenticated Stored Cross-Site Scripting via Recipient Display Name (to.name) in Email Logs — FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTPCWE-79 7.2 High2026-08-06
CVE-2026-17571 Fluent Forms <= 6.2.8 - Reflected Cross-Site Scripting via 'param' — Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form BuilderCWE-79 6.1 Medium2026-08-01
CVE-2026-17567 Fluent Forms <= 6.2.8 - Unauthenticated Sensitive Information Exposure via Insecure Direct Object Reference and Weak Transaction Hash in 'transaction' Parameter — Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form BuilderCWE-639 5.3 Medium2026-07-31
CVE-2026-16655 Fluent Forms <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting via Name Field Nested `password` Member — Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form BuilderCWE-79 7.2 High2026-07-29
CVE-2026-15665 Fluent Support <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute — Fluent Support – Helpdesk & Customer Support Ticket SystemCWE-79 6.4 Medium2026-07-24
CVE-2026-65474 WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability — Ninja TablesCWE-497 5.3 Medium2026-07-23
CVE-2026-65470 WordPress Fluent Support plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability — Fluent SupportCWE-79 6.5 Medium2026-07-23
CVE-2026-57715 WordPress Fluent CRM plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability — Fluent CRMCWE-79 7.1 High2026-07-13
CVE-2026-5069 Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id' — Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form BuilderCWE-863 5.4 Medium2026-07-10
CVE-2026-42655 WordPress Best Payments Plugin for WP plugin <= 4.6.19 - Payment Bypass vulnerability — Best Payments Plugin for WPCWE-472 7.5 Medium2026-06-15
CVE-2025-67971 WordPress FluentCart plugin < 1.3.0 - Cross Site Scripting (XSS) vulnerability — FluentCartCWE-79 7.1 High2026-02-20
CVE-2025-13495 FluentCart A New Era of eCommerce <= 1.3.1 - Authenticated (Administrator+) SQL Injection via 'groupKey' Parameter — FluentCart A New Era of eCommerce – Faster, Lighter, and SimplerCWE-89 4.9 Medium2025-12-03
CVE-2023-6953 PDF Generator For Fluent Forms <= 1.1.7 - Cross-Site Scripting — Fluent PDF GeneratorCWE-79 4.9 Medium2024-02-05

本页汇总了 wpmanageninja 厂商截至目前公开的全部 14 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。