首页 / 漏洞情报库
🛡️ 漏洞情报库（CVE 查询与修复方法）
每日采集 NVD / CISA / 微软等主流漏洞源的 CVE 信息，含漏洞说明、受影响产品、修复方法（补丁/升级版本）。支持按 CVE 号、关键词、风险等级、是否在野、发布时间筛选。
📌 最近漏洞情报周报（每周一篇）
共 45819 条漏洞
| CVE | 等级 | CVSS | 发布时间 | 说明 | 受影响 | 修复方法 |
|---|---|---|---|---|---|---|
| CVE-2026-93981 | MEDIUM | 4.7 | 2026-09-19 | hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or f | honojs hono | 受影响版本 < 4.13.7，请升级到修复版本。 |
| CVE-2026-78030 | CRITICAL | 9.8 | 2026-09-19 | DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm | 受影响版本 < 1.653，请升级到修复版本。 | |
| CVE-2026-9858 | MEDIUM | 4.3 | 2026-09-19 | The Partial Shipment for Woocommerce plugin for WordPress is vulnerable to Missing Authori | wpexpertshub Partial Shipment for WooCom | 受影响版本 ≤ 3.4，请升级到修复版本。 |
| CVE-2026-9766 | MEDIUM | 4.3 | 2026-09-19 | The Empik for Woocommerce plugin for WordPress is vulnerable to authorization bypass in al | empik Empik for Woocommerce | 受影响版本 ≤ 1.5.1，请升级到修复版本。 |
| CVE-2026-9613 | MEDIUM | 4.3 | 2026-09-19 | The Datalogics Ecommerce Delivery – Datalogics plugin for WordPress is vulnerable to autho | datalogics Datalogics Ecommerce Delivery | 受影响版本 ≤ 2.6.65，请升级到修复版本。 |
| CVE-2026-9289 | MEDIUM | 5.3 | 2026-09-19 | The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive Inf | wordlift WordLift – AI powered SEO – Sch | 受影响版本 ≤ 3.54.10，请升级到修复版本。 |
| CVE-2026-93742 | CRITICAL | 9.9 | 2026-09-19 | A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this iss | Totolink A3002MU | 请参考厂商官方公告并升级修复。官方说明：https://github.com/SunnyYANGyaya/cuicuis |
| CVE-2026-8354 | MEDIUM | 6.4 | 2026-09-19 | The Gum Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Script | celomitan Gum Addon for Elementor | 受影响版本 ≤ 1.3.15，请升级到修复版本。 |
| CVE-2026-76579 | MEDIUM | 4.7 | 2026-09-19 | The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting v | litespeedtech LiteSpeed Cache | 受影响版本 ≤ 7.9，请升级到修复版本。 |
| CVE-2026-5410 | MEDIUM | 6.4 | 2026-09-19 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via | davidanderson Redux Framework | 受影响版本 ≤ 4.5.13，请升级到修复版本。 |
| CVE-2026-1256 | MEDIUM | 6.4 | 2026-09-19 | The YS LeadGen plugin for WordPress is vulnerable to authorization bypass and Stored Cross | ysinnovations YS LeadGen – Popup Builder | 受影响版本 ≤ 2.1.4，请升级到修复版本。 |
| CVE-2026-1255 | HIGH | 7.5 | 2026-09-19 | The YS LeadGen plugin for WordPress is vulnerable to Sensitive Information Exposure in all | ysinnovations YS LeadGen – Popup Builder | 受影响版本 ≤ 2.1.4，请升级到修复版本。 |
| CVE-2026-18346 | MEDIUM | 5.3 | 2026-09-19 | The TikTok plugin for WordPress is vulnerable to authorization bypass in all versions up t | tiktokbusinessplugin TikTok | 受影响版本 ≤ 1.4.1，请升级到修复版本。 |
| CVE-2026-9855 | MEDIUM | 6.5 | 2026-09-19 | The Custom Field Template plugin for WordPress is vulnerable to generic SQL Injection via | hiroaki-miyashita Custom Field Template | 受影响版本 ≤ 2.7.8，请升级到修复版本。 |
| CVE-2026-9832 | MEDIUM | 5.3 | 2026-09-19 | The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improp | themehigh Payment Gateway of Stripe for | 受影响版本 ≤ 5.0.8，请升级到修复版本。 |
| CVE-2026-9615 | MEDIUM | 4.3 | 2026-09-19 | The Flex Import plugin for WordPress is vulnerable to Missing Authorization in all version | flextheme Flex Import | 受影响版本 ≤ 3.0，请升级到修复版本。 |
| CVE-2026-9232 | MEDIUM | 6.5 | 2026-09-19 | The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure | easyappointments Easy Appointments | 受影响版本 ≤ 3.12.27，请升级到修复版本。 |
| CVE-2026-87917 | MEDIUM | 6.1 | 2026-09-19 | The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-S | dvankooten MC4WP: Mailchimp for WordPres | 受影响版本 ≤ 4.14.0，请升级到修复版本。 |
| CVE-2026-85658 | HIGH | 8.1 | 2026-09-19 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & | properfraction Paid Membership Plugin, E | 受影响版本 ≤ 4.17.2，请升级到修复版本。 |
| CVE-2026-7527 | MEDIUM | 4.7 | 2026-09-19 | The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable t | johndarrel Hide My WP Ghost – Security & | 受影响版本 ≤ 7.0.02，请升级到修复版本。 |
💡 说明：数据源为 NVD、CISA（在野利用)、微软等官方公开情报，每日自动采集。中文源 CNNVD/CNVD 受官方接口限制暂未接入，描述以英文原版为准，可点击 CVE 号查看详情与官方参考链接。修复方法含补丁/升级版本线索，具体请以厂商官方公告为准。