漏洞列表 359799
CVE ID 标题 严重程度 CVSS 发布时间 受影响产品 数据源 操作
CVE-2025-69309
WordPress Saasplate Core plugin <= 1.2.8 - SQL Injection vulnerability
CRITICAL 9.3 2026-02-20
TeconceTheme Saasplate Core
CVE NVD
CVE-2025-69308
WordPress Nestbyte Core plugin <= 1.2 - SQL Injection vulnerability
CRITICAL 9.3 2026-02-20
TeconceTheme Nestbyte Core
CVE NVD
CVE-2025-69307
WordPress Medinik Core plugin <= 1.3.6 - SQL Injection vulnerability
CRITICAL 9.3 2026-02-20
TeconceTheme Medinik Core
CVE NVD
CVE-2025-69306
WordPress Electio Core plugin <= 1.4 - SQL Injection vulnerability
CRITICAL 9.3 2026-02-20
TeconceTheme Electio Core
CVE NVD
CVE-2025-69305
WordPress Crete Core plugin <= 1.4.3 - SQL Injection vulnerability
CRITICAL 9.3 2026-02-20
TeconceTheme Crete Core
CVE NVD
CVE-2025-69304
WordPress Allmart plugin <= 1.1 - SQL Injection vulnerability
CRITICAL 9.3 2026-02-20
TeconceTheme Allmart
CVE NVD
CVE-2025-69303
WordPress ModelTheme Framework plugin <= 1.9.2 - Broken Access Control vulnerability
HIGH 7.5 2026-02-20
modeltheme ModelTheme Framework
CVE NVD
CVE-2025-69302
WordPress DesignThemes Core Features plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH 7.1 2026-02-20
designthemes DesignThemes Core Features
CVE NVD
CVE-2025-69301
WordPress PhotoMe theme <= 5.6.11 - PHP Object Injection vulnerability
CRITICAL 9.8 2026-02-20
ThemeGoods PhotoMe
CVE NVD
CVE-2025-69299
WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability
HIGH 7.2 2026-02-20
Laborator Oxygen
CVE NVD
CVE-2025-69298
WordPress Gauge theme <= 6.56.4 - Broken Access Control vulnerability
HIGH 7.5 2026-02-20
GhostPool Gauge
CVE NVD
CVE-2025-69297
WordPress Aardvark Plugin plugin <= 2.19 - Broken Access Control vulnerability
HIGH 7.5 2026-02-20
GhostPool Aardvark Plugin
CVE NVD
CVE-2025-69296
WordPress Aardvark theme <= 4.6.3 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH 7.1 2026-02-20
GhostPool Aardvark
CVE NVD
CVE-2025-69295
WordPress Coven Core plugin <= 1.3 - SQL Injection vulnerability
CRITICAL 9.3 2026-02-20
TeconceTheme Coven Core
CVE NVD
CVE-2025-69294
WordPress PeakShops theme <= 1.5.9 - PHP Object Injection vulnerability
HIGH 8.8 2026-02-20
fuelthemes PeakShops
CVE NVD
CVE-2025-69063
WordPress New User Approve plugin <= 3.2.0 - Broken Access Control vulnerability
HIGH 8.6 2026-02-20
Saad Iqbal New User Approve
CVE NVD
CVE-2025-69011
WordPress Cool Tag Cloud plugin <= 2.29 - Cross Site Scripting (XSS) vulnerability
MEDIUM 6.5 2026-02-20
WPKube Cool Tag Cloud
CVE NVD
CVE-2025-68895
WordPress AhaChat Messenger Marketing plugin <= 1.1 - Broken Authentication vulnerability
MEDIUM 6.5 2026-02-20
ahachat AhaChat Messenger Marketing
CVE NVD
CVE-2025-68880
WordPress Simple Archive Generator plugin <= 5.2 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH 7.1 2026-02-20
peterwsterling Simple Archive Generator
CVE NVD
CVE-2025-68863
WordPress iContact for Gravity Forms plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH 7.1 2026-02-20
Zack Katz iContact for Gravity Forms
CVE NVD