漏洞列表 350874
CVE ID 标题 严重程度 CVSS 发布时间 受影响产品 数据源 操作
CVE-2025-13841
WordPress plugin Smart App Banners 跨站脚本漏洞
MEDIUM 6.4 2026-01-07
clevelandwebdeveloper Smart App Banners
CVE NVD +1
CVE-2025-13801
WordPress plugin Yoco Payments 路径遍历漏洞
HIGH 7.5 2026-01-07
yocoadmin Yoco Payments
CVE NVD +1
CVE-2025-14070
WordPress plugin Reviewify 安全漏洞
HIGH 7.5 2026-01-07
xfinitysoft Reviewify — Review Discounts & Photo/Video Reviews for WooCommerce
CVE NVD +1
CVE-2025-13990
WordPress plugin Mamurjor Employee Info 跨站请求伪造漏洞
MEDIUM 4.3 2026-01-07
mamurjor Mamurjor Employee Info
CVE NVD +1
CVE-2025-13419
WordPress plugin Guest posting / Frontend Posting / Front Editor – WP Front User Submit 安全漏洞
MEDIUM 5.3 2026-01-07
aharonyan Guest posting / Frontend Posting / Front Editor – WP Front User Submit
CVE NVD +1
CVE-2025-14465
WordPress plugin Sticky Action Buttons 跨站请求伪造漏洞
MEDIUM 4.3 2026-01-07
praveentamil Sticky Action Buttons
CVE NVD +1
CVE-2025-14144
WordPress plugin Mstoic Shortcodes 跨站脚本漏洞
MEDIUM 6.4 2026-01-07
mstoic Mstoic Shortcodes
CVE NVD +1
CVE-2025-14131
WordPress plugin WP Widget Changer 跨站脚本漏洞
MEDIUM 6.1 2026-01-07
damienoh WP Widget Changer
CVE NVD +1
CVE-2025-14453
WordPress plugin My Album Gallery 跨站脚本漏洞
MEDIUM 6.4 2026-01-07
ruhul080 My Album Gallery
CVE NVD +1
CVE-2025-14113
WordPress plugin Viitor Button Shortcodes 跨站脚本漏洞
MEDIUM 6.4 2026-01-07
viitorcloudvc Viitor Button Shortcodes
CVE NVD +1
CVE-2025-14112
WordPress plugin Snillrik Restaurant 跨站脚本漏洞
MEDIUM 6.4 2026-01-07
mattiaspkallio Snillrik Restaurant
CVE NVD +1
CVE-2025-13418
WordPress plugin Responsive Pricing Table 跨站脚本漏洞
MEDIUM 6.4 2026-01-07
spwebguy Responsive Pricing Table
CVE NVD +1
CVE-2025-14626
WordPress plugin QR Code for WooCommerce order emails, PDF invoices, packing slips 跨站脚本漏洞
MEDIUM 6.4 2026-01-07
www15to QR Code for WooCommerce order emails, PDF invoices, packing slips
CVE NVD +1
CVE-2025-14130
WordPress plugin Post Like Dislike 跨站脚本漏洞
MEDIUM 6.1 2026-01-07
cuvixsystem Post Like Dislike
CVE NVD +1
CVE-2025-13849
WordPress plugin Cool YT Player 跨站脚本漏洞
MEDIUM 6.4 2026-01-07
matiasanca Cool YT Player
CVE NVD +1
CVE-2025-13887
WordPress plugin AI BotKit – AI Chatbot & Live Support for WordPress 跨站脚本漏洞
MEDIUM 6.4 2026-01-07
wisdmlabs AI BotKit – AI Chatbot & Live Support for WordPress (No-Code)
CVE NVD +1
CVE-2025-14145
WordPress plugin Niche Hero 跨站脚本漏洞
MEDIUM 6.4 2026-01-07
djrowling Niche Hero | Beautifully-designed blocks in seconds
CVE NVD +1
CVE-2025-14352
WordPress plugin Awesome Hotel Booking 安全漏洞
MEDIUM 5.3 2026-01-07
nahian91 Awesome Hotel Booking
CVE NVD +1
CVE-2025-14110
WordPress plugin WP Js List Pages Shortcodes 跨站脚本漏洞
MEDIUM 6.4 2026-01-07
pichel WP Js List Pages Shortcodes
CVE NVD +1
CVE-2025-13848
WordPress plugin STM Gallery 跨站脚本漏洞
MEDIUM 6.4 2026-01-07
sergiotoca STM Gallery 1.9
CVE NVD +1