首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 16964 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-111947 | MEDIUM | 5.5 | 2026-10-21 | The Pricing Table WordPress Plugin WordPress plugin before 4.1.3 does not perform authori | Unknown Pricing Table WordPress Plugin | 受影响版本 < 4.1.3，请升级到修复版本。 |
| CVE-2026-111948 | HIGH | 7.1 | 2026-10-21 | The User Profile Builder WordPress plugin before 4.0.1 does not escape the current page U | Unknown User Profile Builder | 受影响版本 < 4.0.1，请升级到修复版本。 |
| CVE-2026-111949 | HIGH | 7.5 | 2026-10-21 | The miniOrange 2FA WordPress plugin before 6.3.1 does not prevent a pending passkey login | Unknown miniOrange 2FA | 受影响版本 < 6.3.1，请升级到修复版本。 |
| CVE-2026-110523 | HIGH | 8.1 | 2026-10-21 | The WP User Manager WordPress plugin before 2.9.26 does not keep its paid-registration ca | Unknown WP User Manager | 受影响版本 < 2.9.26，请升级到修复版本。 |
| CVE-2026-107237 | HIGH | 8.2 | 2026-10-21 | The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.28 does not perform | Unknown Backup and Staging by WP Time Ca | 受影响版本 < 1.22.28，请升级到修复版本。 |
| CVE-2026-107506 | HIGH | 7.5 | 2026-10-21 | The Simple Banner WordPress plugin before 3.3.3 does not correctly limit the capabilities | Unknown Simple Banner | 受影响版本 < 3.3.3，请升级到修复版本。 |
| CVE-2026-107788 | MEDIUM | 4.3 | 2026-10-21 | The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks whe | Unknown SmartyParcel | 受影响版本 < 1.23.4，请升级到修复版本。 |
| CVE-2026-107789 | MEDIUM | 5.3 | 2026-10-21 | The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks whe | Unknown SmartyParcel | 受影响版本 < 1.23.4，请升级到修复版本。 |
| CVE-2026-107790 | MEDIUM | 6.8 | 2026-10-21 | The HireZoot WordPress plugin before 4.1.1 does not sanitise and escape some of its store | Unknown HireZoot | 受影响版本 < 4.1.1，请升级到修复版本。 |
| CVE-2026-108073 | MEDIUM | 5.3 | 2026-10-21 | The SureCart WordPress plugin before 4.9.5 does not restrict which related objects an ano | Unknown SureCart | 受影响版本 < 4.9.5，请升级到修复版本。 |
| CVE-2026-109147 | HIGH | 7.1 | 2026-10-21 | The WP Booking System WordPress plugin before 2.1.0.3 does not validate and escape one of | Unknown WP Booking System | 受影响版本 < 2.1.0.3，请升级到修复版本。 |
| CVE-2026-109926 | MEDIUM | 4.3 | 2026-10-21 | The Productive Commerce WordPress plugin before 1.1.49 does not perform a capability chec | Unknown Productive Commerce | 受影响版本 < 1.1.49，请升级到修复版本。 |
| CVE-2026-110514 | MEDIUM | 4.9 | 2026-10-21 | The WPZOOM Portfolio Lite WordPress plugin before 1.4.34 does not check that a user is al | Unknown WPZOOM Portfolio Lite | 受影响版本 < 1.4.34，请升级到修复版本。 |
| CVE-2026-105996 | MEDIUM | 4.8 | 2026-10-21 | The Booking Package WordPress plugin before 1.7.31 does not generate booking cancellation | Unknown Booking Package | 受影响版本 < 1.7.31，请升级到修复版本。 |
| CVE-2026-105998 | MEDIUM | 5.3 | 2026-10-21 | The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or v | Unknown Booking Package | 受影响版本 < 1.7.31，请升级到修复版本。 |
| CVE-2026-105999 | MEDIUM | 5.3 | 2026-10-21 | The Booking Package WordPress plugin before 1.7.31 does not perform authorization checks b | Unknown Booking Package | 受影响版本 < 1.7.31，请升级到修复版本。 |
| CVE-2026-106932 | MEDIUM | 6.5 | 2026-10-21 | The Moloni WordPress plugin before 5.0.14 does not perform capability or nonce checks on s | Unknown Moloni | 受影响版本 < 5.0.14，请升级到修复版本。 |
| CVE-2026-107127 | HIGH | 7.5 | 2026-10-21 | The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not validate the orig | Unknown Uncanny Toolkit for LearnDash | 受影响版本 < 3.8.2，请升级到修复版本。 |
| CVE-2026-107128 | MEDIUM | 5 | 2026-10-21 | The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the a | Unknown Uncanny Toolkit for LearnDash | 受影响版本 < 3.8.2，请升级到修复版本。 |
| CVE-2026-105992 | MEDIUM | 5.3 | 2026-10-21 | The Ettrick Escape Room Booking WordPress plugin before 1.3.1 does not verify a booking's | Unknown Ettrick Escape Room Booking | 受影响版本 < 1.3.1，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。